high5.5
CVE-2024-40137
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
Impact
Dolibarr ERP CRM before 19.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the Computed field parameter under the Users Module Setup function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | dolibarr/dolibarr | < 19.0.2 | 19.0.2 |
Affected products
| Product | Affected versions |
|---|---|
| Dolibarr ERP CRM | before 19.0.2-php8.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.