CVE-2022-4766

A vulnerability was found in dolibarr_project_timesheet up to 4.5.5. It has been declared as problematic. This vulnerability affects unknown code of the component Form Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. Upgrading to version 4.5.6.a is able to address this issue. The name of the patch is 082282e9dab43963e6c8f03cfaddd7921de377f4. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216880.

• CWE-352

• https://github.com/delcroip/dolibarr_project_timesheet/commit/082282e9dab43963e6c8f03cfaddd7921de377f4Patch, Third Party Advisory
• https://github.com/delcroip/dolibarr_project_timesheet/pull/200Patch, Third Party Advisory
• https://github.com/delcroip/dolibarr_project_timesheet/releases/tag/4.5.6.aRelease Notes, Third Party Advisory
• https://vuldb.com/?ctiid.216880Third Party Advisory
• https://vuldb.com/?id.216880Third Party Advisory
• https://github.com/delcroip/dolibarr_project_timesheet/commit/082282e9dab43963e6c8f03cfaddd7921de377f4Patch, Third Party Advisory
• https://github.com/delcroip/dolibarr_project_timesheet/pull/200Patch, Third Party Advisory
• https://github.com/delcroip/dolibarr_project_timesheet/releases/tag/4.5.6.aRelease Notes, Third Party Advisory
• https://vuldb.com/?ctiid.216880Third Party Advisory
• https://vuldb.com/?id.216880Third Party Advisory

Published

Dec 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47654GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffe…7.8
• CVE-2022-47655Libde265 1.0.9 is vulnerable to Buffer Overflow in function …7.8
• CVE-2022-47656GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffe…7.8
• CVE-2022-47657GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffe…7.8
• CVE-2022-47658GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffe…7.8
• CVE-2022-47659GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffe…7.8
• CVE-2022-47660GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer over…7.8
• CVE-2022-47661GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffe…7.8
• CVE-2022-47662GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/…5.5
• CVE-2022-47663GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffe…7.8
• CVE-2022-47664Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_p…7.8
• CVE-2022-47665Libde265 1.0.9 has a heap buffer overflow vulnerability in d…7.8