CVE-2026-112361

Publié : 19 octobre 2026

Modifié : 19 octobre 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component CSP. Such manipulation leads to protection mechanism failure. The attack can be executed remotely. Upgrading to version 24.0.0 is sufficient to resolve this issue. The name of the patch is 9f9ffa288d4ad2632c1d5dd88272c699a592f4ec. You should upgrade the affected component.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/Dolibarr/dolibarr/https://github.com/Dolibarr/dolibarr/commit/9f9ffa288d4ad2632c1d5dd88272c699a592f4ec https://github.com/Dolibarr/dolibarr/releases/tag/24.0.0 https://vuldb.com/cve/CVE-2026-112361 https://vuldb.com/submit/990315 https://vuldb.com/vuln/422397 https://vuldb.com/vuln/422397/cti

Dernières Vulnérabilités

CVE-2026-86981

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

VOIR DÉTAILS

CVE-2026-86979

A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

VOIR DÉTAILS

CVE-2026-86977

An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages.

VOIR DÉTAILS