{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"21.0.2"}],"component":"dolibarr/dolibarr","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-49xw-hw94-fmv2","id":"tcs_01M5KETVQSEGR05F0PJTEHEFDY","modified_at":"2025-12-18T01:46:13.773252Z","published_at":"2025-07-21T19:29:09Z","references":["https://osv.dev/vulnerability/GHSA-49xw-hw94-fmv2","https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-49xw-hw94-fmv2","https://github.com/Dolibarr/dolibarr","https://github.com/Dolibarr/dolibarr/blob/21.0.2/htdocs/admin/menus/edit.php","https://github.com/Dolibarr/dolibarr/blob/21.0.2/htdocs/user/document.php"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-49xw-hw94-fmv2","url":"https://osv.dev/vulnerability/GHSA-49xw-hw94-fmv2"}],"summary":"Dolibarr has Remote Code Execution Vulnerability (Bypass)"}