CVE-2022-4093: SQL Injection in dolibarr/dolibarr
First published: Mon Nov 21 2022(Updated: )
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In some cases, an attacker can obtain a persistent backdoor into an organization's systems, leading to a long-term compromise that can go unnoticed for an extended period. This affect 16.0.1 and 16.0.2 only. 16.0.0 or lower, and 16.0.3 or higher are not affected
Credit: security@huntr.dev security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dolibarr Dolibarr Erp\/crm | =16.0.1 | |
| Dolibarr Dolibarr Erp\/crm | =16.0.2 | |
| =16.0.1 | ||
| =16.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-4093?
CVE-2022-4093 is a vulnerability that allows SQL injection attacks, resulting in unauthorized access to sensitive data.
How does CVE-2022-4093 affect Dolibarr ERP/CRM?
CVE-2022-4093 affects Dolibarr ERP/CRM versions 16.0.1 and 16.0.2.
What is the severity of CVE-2022-4093?
CVE-2022-4093 has a severity rating of 9.8 (Critical).
What are the potential consequences of a SQL injection attack?
SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information.
How can I fix the CVE-2022-4093 vulnerability in Dolibarr ERP/CRM?
To fix the CVE-2022-4093 vulnerability in Dolibarr ERP/CRM, you should update to a version that includes the necessary security patches.
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/dolibarr
- canonical/dolibarr dolibarr erp\/crm
- version/dolibarr dolibarr erp\/crm/16.0.1
- version/dolibarr dolibarr erp\/crm/16.0.2