Dolibarr ERP CRM versions up to 15.0.3 contain a vulnerability in the Online Signature Module's dol_verifyHash function, leading to insufficient verification of cryptographic signatures. This flaw allows remote attackers to manipulate signature verification, though exploitation is considered highly complex and difficult. Public exploit code is available, but no vendor response or patch has been provided.