{"action":"Upgrade dolibarr/dolibarr to 18.0.0 or later.","affected":[{"fixed":"18.0.0","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2023-4198"],"ecosystem":"Packagist","epss":0.00555,"exploited":false,"fixed_versions":["18.0.0"],"ghsa_id":"GHSA-48v2-596x-4jr9","id":"tcs_01M5KETTP5E1C9EY18RT3X7M9B","modified_at":"2025-04-03T15:27:07.950900Z","published_at":"2023-11-01T09:30:53Z","references":["https://osv.dev/vulnerability/GHSA-48v2-596x-4jr9","https://nvd.nist.gov/vuln/detail/CVE-2023-4198","https://github.com/Dolibarr/dolibarr/commit/3065b9ca6ade988e8d7a8a8550415c0abb56b9cb","https://github.com/Dolibarr/dolibarr/commit/3065b9ca6ade988e8d7a8a8550415c0abb56b9cb#diff-7d68365a708c954051853ade884c7e97c6ff13150ee92657d6ffc8603e0f947b","https://github.com/Dolibarr/dolibarr","https://starlabs.sg/advisories/23/23-4198"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-48v2-596x-4jr9","url":"https://osv.dev/vulnerability/GHSA-48v2-596x-4jr9"}],"summary":"Dolibarr Improper Input Validation vulnerability"}