{"action":"No fix published. Pin and monitor.","affected":[],"component":"dolibarr/dolibarr","cve_ids":["CVE-2020-7995"],"ecosystem":"Packagist","epss":0.04537,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m5c3-3gvf-q8j5","id":"tcs_01M5KF55PQRBKR1GQQX88WS5AH","modified_at":"2025-04-03T15:26:59.030830Z","published_at":"2022-05-24T17:07:30Z","references":["https://osv.dev/vulnerability/GHSA-m5c3-3gvf-q8j5","https://nvd.nist.gov/vuln/detail/CVE-2020-7995","https://github.com/Dolibarr/dolibarr","https://github.com/tufangungor/tufangungor.github.io/blob/master/_posts/2020-01-19-dolibarr-10.0.6-brute-force.md","https://tufangungor.github.io/exploit/2020/01/18/dolibarr-10.0.6-brute-force.html","http://packetstormsecurity.com/files/163541/Dolibarr-ERP-CRM-10.0.6-Login-Brute-Forcer.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m5c3-3gvf-q8j5","url":"https://osv.dev/vulnerability/GHSA-m5c3-3gvf-q8j5"}],"summary":"Dolibarr Improper Restriction of Excessive Authentication Attempts"}