GHSA-r9cm-pw9j-3fpx
Dolibarr Improper Input Validation vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | dolibarr/dolibarr | < 18.0.2 | 18.0.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.
References
External links from the advisory. They lead to third-party sites.