CVE-2025-67486
HIGHDolibarr <=22.0.2 User Extrafields - Authenticated Code Execution
Title source: manualDescription
Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contains an authenticated remote code execution vulnerability in the user extrafields functionality. User-controlled input from the "computed value" field is passed to PHP's `eval()` function without adequate sanitization, allowing authenticated administrators to execute arbitrary PHP code on the server. As of time of publication, no patched versions are available.
References (2)
Core 2
Core References
X_Refsource_Confirm x_refsource_confirm
https://medium.com/@abduxalilovjavohir/dolibarr-erp-authenticated-remote-code-execution-via-eval-injection-in-user-extrafields-dfc305d0118e
X_Refsource_Misc x_refsource_misc
https://github.com/Dolibarr/dolibarr/blob/22.0.2/htdocs/core/lib/functions.lib.php
Scores
CVSS v3
7.2
EPSS
0.0088
EPSS Percentile
54.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-74
Status
published
Products (2)
Dolibarr/dolibarr
<= 22.0.2
dolibarr/dolibarr_erp\/crm
< 22.0.2
Published
May 08, 2026
Tracked Since
May 08, 2026