{"action":"Upgrade dolibarr/dolibarr to 9.0.3 or later.","affected":[{"fixed":"9.0.3","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2019-11201"],"ecosystem":"Packagist","epss":0.02236,"exploited":false,"fixed_versions":["9.0.3"],"ghsa_id":"GHSA-jwg3-v9xm-v6q9","id":"tcs_01M5KF4YH59MFDQ3T6PP98635S","modified_at":"2024-02-16T08:11:09.474080Z","published_at":"2022-05-24T16:51:38Z","references":["https://osv.dev/vulnerability/GHSA-jwg3-v9xm-v6q9","https://nvd.nist.gov/vuln/detail/CVE-2019-11201","https://github.com/Dolibarr/dolibarr/issues/10984#issuecomment-485841141","https://github.com/Dolibarr/dolibarr/commit/63c0ab93fb21f86c1b736061af9fa1eee90148fd","https://github.com/Dolibarr/dolibarr","https://know.bishopfox.com/advisories/dolibarr-version-9-0-1-vulnerabilities"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-jwg3-v9xm-v6q9","url":"https://osv.dev/vulnerability/GHSA-jwg3-v9xm-v6q9"}],"summary":"Dolibarr ERP and CRM Code Injection"}