What is GHSA-v3m8-7h3p-6j5m?

GHSA-v3m8-7h3p-6j5m is a security advisory published by GitHub Security Advisories with Critical severity. Dolibarr ERP and CRM SQLi

Which CVE IDs does GHSA-v3m8-7h3p-6j5m cover?

GHSA-v3m8-7h3p-6j5m covers the following CVE IDs: CVE-2017-9435. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v3m8-7h3p-6j5m?

GHSA-v3m8-7h3p-6j5m has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-v3m8-7h3p-6j5m?

GHSA-v3m8-7h3p-6j5m affects 1 product, including: composer/dolibarr/dolibarr:\u003c 5.0.3.

GHSA-v3m8-7h3p-6j5mCriticalCVSS 9.8

Dolibarr ERP and CRM SQLi

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

July 27, 2023

🔗 CVE IDs covered (1)

CVE-2017-9435 →

📋 Description

Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

🎯 Affected products1

composer/dolibarr/dolibarr:< 5.0.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-9435
https://github.com/Dolibarr/dolibarr/commit/70636cc59ffa1ffbc0ce3dba315d7d9b837aad04
https://github.com/Dolibarr/dolibarr/blob/develop/ChangeLog
https://github.com/advisories/GHSA-v3m8-7h3p-6j5m