{"action":"Upgrade dolibarr/dolibarr to 8.0.4 or later.","affected":[{"fixed":"8.0.4","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2018-19994"],"ecosystem":"Packagist","epss":0.02032,"exploited":false,"fixed_versions":["8.0.4"],"ghsa_id":"GHSA-78hj-952q-99rw","id":"tcs_01M5KEXV3WZ96J9SBAFM124G74","modified_at":"2024-04-24T21:11:37.333316Z","published_at":"2022-05-14T01:42:07Z","references":["https://osv.dev/vulnerability/GHSA-78hj-952q-99rw","https://nvd.nist.gov/vuln/detail/CVE-2018-19994","https://github.com/Dolibarr/dolibarr/commit/850b939ffd2c7a4443649331b923d5e0da2d6446","https://github.com/Dolibarr/dolibarr"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-78hj-952q-99rw","url":"https://osv.dev/vulnerability/GHSA-78hj-952q-99rw"}],"summary":"Dolibarr error-based SQL injection vulnerability in product/card.php"}