Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hfj8-gv3c-fx7w

Опубликовано: 12 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9

Описание

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php

EPSS

Процентиль: 17%
0.00054
Низкий

9 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9
ubuntu
около 2 месяцев назад

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a third party who indicates that exploitation can only occur if an unprivileged user knows the token of an admin user.

CVSS3: 9
nvd
около 2 месяцев назад

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a third party who indicates that exploitation can only occur if an unprivileged user knows the token of an admin user.

CVSS3: 9
debian
около 2 месяцев назад

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0. ...

EPSS

Процентиль: 17%
0.00054
Низкий

9 Critical

CVSS3

Дефекты

CWE-284