Dolibarr
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 176 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 28, 2011 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dolibarr CSP document.php protection mechanism
Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize()
Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php
Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.php
Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameter
Dolibarr 10.0.0 before 24.0.0 Missing Authorization on REST Users Groups Endpoint
Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletion
Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filename
Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys
Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clonetasks Mass Action
Monitor Dolibarr in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.