← All advisories

Critical severity9.8NVD Advisory· Published Jan 14, 2022· Updated Jun 17, 2026

CVE-2022-0224

CVE-2022-0224

Description

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
dolibarr/dolibarrPackagist	<= 14.0.5	—

Affected products

4

Dolibarr/Dolibarr2 versions
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:*range: <15.0.0
- (no CPE)range: unspecified
osv-coords2 versions
pkg:bitnami/dolibarr pkg:composer/dolibarr/dolibarr
< 15.0.0+ 1 more
- (no CPE)range: < 15.0.0
- (no CPE)range: <= 14.0.5

Patches

Vulnerability mechanics

References

4

github.com/dolibarr/dolibarr/commit/b9b45fb50618aa8053961f50bc8604b188d0ea79nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/f1d1ce3e-ca92-4c7b-b1b8-934e28eaa486nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-j545-frh3-r9gqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0224ghsaADVISORY

News mentions

0

No linked articles in our index yet.