VulnerabilityModified

CVE-2019-25452

Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execute arbitrary SQL queries.

HIGH 8.8EPSS 0.37%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted POST requests with malicious SQL payloads in the elemid parameter to extract sensitive database information using error-based or time-based blind SQL injection techniques.

CVSS 4.0: 8.8 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.37% probability · 31th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: dolibarr/dolibarr erp\/crm
Source: disclosure@vulncheck.com

References

https://www.exploit-db.com/exploits/47362Exploit, VDB Entry
https://www.vulncheck.com/advisories/dolibarr-erpcrm-sql-injection-via-elemidBroken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.