Packagist/dolibarr/dolibarr CVE-2018-16809: critical 9.8, EPSS 2.26%
Dolibarr SQL injection via the integer parameters qty and value_unit
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.8 | - | 7.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-h34q-878w-w96r
- https://nvd.nist.gov/vuln/detail/CVE-2018-16809
- https://github.com/Dolibarr/dolibarr/issues/9449
- https://github.com/Dolibarr/dolibarr
CVE-2018-16809 · published · modified · JSON