Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-58376— Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints

Quick assessment

Affected
Dolibarr dolibarr
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Dolibarr是Dolibarr基金会开源的一个应用软件。可帮助管理用户组织的活动。 Dolibarr 23.0.3及之前版本存在SQL注入漏洞，该漏洞源于在setup dictionary和multicurrencies REST API端点的sqlfilters查询参数中进行SQL注入，仅对括号平衡进行验证，导致恶意值被连接进SQL WHERE子句，可能导致经过身份验证的API用户提取密码哈希值和API密钥等任意数据库内容。

CVSS 7.6 · High EPSS 0.36% · P27

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 2

VendorProduct Version RangeStatus
Dolibarr dolibarr ≤ 23.0.3 affected
14db36e8486ef725b0d493d97abb2950a54358d3 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-58376

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints
Source: CVE Program / CVE List V5
Vulnerability Description
Dolibarr through 23.0.3, fixed in commit 14db36e, contains a sql injection vulnerability that allows authenticated API users to exfiltrate arbitrary database contents by supplying malicious values to the sqlfilters query parameter in the setup dictionary and multicurrencies REST API endpoints. The affected endpoints in api_setup.class.php and api_multicurrencies.class.php validate sqlfilters only for balanced parentheses and rewrite matched triplets, allowing text placed outside the expected shape such as an appended UNION SELECT to be concatenated into the SQL WHERE clause unmodified, enabling retrieval of sensitive data including password hashes and API keys.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Dolibarr SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dolibarr是Dolibarr基金会开源的一个应用软件。可帮助管理用户组织的活动。 Dolibarr 23.0.3及之前版本存在SQL注入漏洞，该漏洞源于在setup dictionary和multicurrencies REST API端点的sqlfilters查询参数中进行SQL注入，仅对括号平衡进行验证，导致恶意值被连接进SQL WHERE子句，可能导致经过身份验证的API用户提取密码哈希值和API密钥等任意数据库内容。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Dolibarr dolibarr 0 ~ 23.0.3 -

II. Public POCs for CVE-2026-58376

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-58376

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-58376 (2)

Vendor Advisories for CVE-2026-58376 (1)

News Coverage for CVE-2026-58376 (1)

IV. Related Vulnerabilities

Same product: dolibarr
Same vendor: Dolibarr
Same weakness: CWE-89

V. Comments for CVE-2026-58376

No comments yet

Leave a comment