{"action":"Upgrade dolibarr/dolibarr to 9.0.3 or later.","affected":[{"fixed":"9.0.3","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2019-11200"],"ecosystem":"Packagist","epss":0.02101,"exploited":false,"fixed_versions":["9.0.3"],"ghsa_id":"GHSA-2rwh-262r-r85j","id":"tcs_01M5KES8Q2BWGTW2N8GEHXHNEG","modified_at":"2024-11-30T05:34:04.145371Z","published_at":"2022-05-24T16:51:38Z","references":["https://osv.dev/vulnerability/GHSA-2rwh-262r-r85j","https://nvd.nist.gov/vuln/detail/CVE-2019-11200","https://github.com/Dolibarr/dolibarr/issues/10984#issuecomment-488297419","https://github.com/Dolibarr/dolibarr/commit/01075081cbcd9130a72115cdb50ee61fc394edc1","https://github.com/Dolibarr/dolibarr/commit/d6ae62478c8841fdfe58971494818b599f396d4f","https://github.com/Dolibarr/dolibarr","https://know.bishopfox.com/advisories/dolibarr-version-9-0-1-vulnerabilities"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-2rwh-262r-r85j","url":"https://osv.dev/vulnerability/GHSA-2rwh-262r-r85j"}],"summary":"Dolibarr ERP and CRM malicious executable loading"}