CVE-2018-9019

moderate-risk

Published 2018-05-22

SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php.

Do I need to act?

2.0% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Fix available

Upgrade to: f15da0b980f8c3ed6862d45a654f0ba8ccbe8acf, 83b762b681c6dfdceb809d26ce95f3667b614739

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (4)

Dolibarr

Data Integrator

Affected Vendors

Oracle Dolibarr

References (6)

Release Notes https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog

Patch https://github.com/Dolibarr/dolibarr/commit/83b762b681c6dfdceb809d26ce95f3667b61...

Third Party Advisory https://www.oracle.com/security-alerts/cpujan2021.html

Release Notes https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog

Patch https://github.com/Dolibarr/dolibarr/commit/83b762b681c6dfdceb809d26ce95f3667b61...

Third Party Advisory https://www.oracle.com/security-alerts/cpujan2021.html

/ 100

moderate-risk

Severity 32/34 · Critical

Exploitability 5/34 · Minimal

Exposure 10/34 · Low