CVE-2022-4093

CRITICAL

Dolibarr 16.0.1 and 16.0.2 - SQL Injection

Title source: manual
STIX 2.1

Description

SQL injection attacks can result in unauthorized access to sensitive data, such as passwords, credit card details, or personal user information. Many high-profile data breaches in recent years have been the result of SQL injection attacks, leading to reputational damage and regulatory fines. In some cases, an attacker can obtain a persistent backdoor into an organization's systems, leading to a long-term compromise that can go unnoticed for an extended period. This affect 16.0.1 and 16.0.2 only. 16.0.0 or lower, and 16.0.3 or higher are not affected

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0031
EPSS Percentile 53.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (3)
dolibarr/dolibarr 16.0.1 - 16.0.3Packagist
dolibarr/dolibarr_erp\/crm 16.0.1
dolibarr/dolibarr_erp\/crm 16.0.2
Published Nov 21, 2022
Tracked Since Feb 18, 2026