CVE-2022-40871

Katalog CVE

CVSS 9.8 · Critical EPSS 33,9%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada dolibarr erp/crm. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval.

Rincian

Terbit di NVD

12 Oktober 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

33,9% peluang dieksploitasi; lebih tinggi dari 98,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/youncyb/dolibarr-rce exploit · advisory pihak ketiga