What is GHSA-8qvx-f5gf-g43v?

GHSA-8qvx-f5gf-g43v is a security advisory published by GitHub Security Advisories with Medium severity. Logic error in dolibarr

Which CVE IDs does GHSA-8qvx-f5gf-g43v cover?

GHSA-8qvx-f5gf-g43v covers the following CVE IDs: CVE-2022-0174. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8qvx-f5gf-g43v?

GHSA-8qvx-f5gf-g43v has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-8qvx-f5gf-g43v?

GHSA-8qvx-f5gf-g43v affects 1 product, including: composer/dolibarr/dolibarr:\u003c 15.0.0.

GHSA-8qvx-f5gf-g43vMediumCVSS 4.3

Logic error in dolibarr

Vendor

GitHub Security Advisories

Published

January 12, 2022

Last Modified

July 21, 2023

🔗 CVE IDs covered (1)

CVE-2022-0174 →

📋 Description

The application does not check the input of price number lead to Business Logic error through negative price amount.

🎯 Affected products1

composer/dolibarr/dolibarr:< 15.0.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-0174
https://github.com/dolibarr/dolibarr/commit/d892160f4f130385a3ce520f66cb8cf2eb8c5c32
https://huntr.dev/bounties/ed3ed4ce-3968-433c-a350-351c8f8b60db
https://github.com/advisories/GHSA-8qvx-f5gf-g43v