Threats tagged 'ghsa-m4jj-h65f-p4xj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-116218Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL injection vulnerability that allows authenticated API users to High7.22026-10-26GCVE DatabaseCVE-2026-116218 Dolibarr ERP CRM versions from 19.0.0 up to but not including 23.0.4 contain an SQL injection vulnerability in the third-party bankaccounts REST API endpoint. Authenticated users with societe/creer permission can exploit this flaw by injecting SQL via the 'type' field, potentially reading sensitive data such as password hashes and API keys through time-based blind SQL subqueries. Report on CVE-2026-116218 Vulnerability CWE-89 #ghsa-m4jj-h65f-p4xj	GCVE Database	2026-10-26

Page 1 of 1