This vulnerability affects the dol_verifyHash function within the Online Signature Module of Dolibarr ERP CRM (versions 23.0.0 to 23.0.2). It results in improper verification of cryptographic signatures, potentially allowing an attacker to bypass signature validation remotely. The attack complexity is high, and no privileges or user interaction are required. The vulnerability has a CVSS 4.0 base score of 6.3, indicating medium severity. Despite public disclosure and exploit availability, the vendor has not issued a patch or advisory.

An attacker can remotely exploit this vulnerability to bypass cryptographic signature verification in the affected module. This could undermine the integrity assurances provided by the Online Signature Module, potentially allowing unauthorized actions or data manipulation. However, the high attack complexity reduces the likelihood of widespread exploitation. No evidence of active exploitation in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official Dolibarr channels for updates. Until a patch is available, consider restricting access to the affected module or implementing additional verification controls where feasible.