Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Dolibarr 24.0.1 Clear all filters
TI-2026-60329 CVE-2026-89013 · GHSA-fm6p-42mr-x6jm

Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.php

Priority MEDIUM 47

Dolibarr 23.0.4 before 24.0.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read arbitrary files through the document storage endpoints by supplying a crafted hashp parameter val…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0156 Published 2026-09-11 Fixed in 24.0.1 CWE-863
TI-2026-60328 CVE-2026-89012 · GHSA-vhvr-3m2v-rrfq

Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameter

Priority LOW 32

Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00465 Published 2026-09-11 Fixed in 24.0.1 CWE-178