What is GHSA-8v7v-6mmm-xjxm?

GHSA-8v7v-6mmm-xjxm is a security advisory published by GitHub Security Advisories with High severity. Dolibarr SQL injection vulnerability in accountancy/customer/card.php

Which CVE IDs does GHSA-8v7v-6mmm-xjxm cover?

GHSA-8v7v-6mmm-xjxm covers the following CVE IDs: CVE-2020-14443. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8v7v-6mmm-xjxm?

GHSA-8v7v-6mmm-xjxm has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-8v7v-6mmm-xjxm?

GHSA-8v7v-6mmm-xjxm affects 1 product, including: composer/dolibarr/dolibarr:\u003c 11.0.5.

GHSA-8v7v-6mmm-xjxmHighCVSS 8.8

Dolibarr SQL injection vulnerability in accountancy/customer/card.php

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2020-14443 →

📋 Description

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.4 and below allows remote authenticated users to execute arbitrary SQL commands via the id parameter.

🎯 Affected products1

composer/dolibarr/dolibarr:< 11.0.5

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-14443
https://github.com/Dolibarr/dolibarr/commit/40e16672e3aa4e9208ea7a4829f30507dcdfc4ba
https://github.com/advisories/GHSA-8v7v-6mmm-xjxm