Description

Dolibarr is vulnerable to Business Logic Errors in theWeight, Length x Width x Height, Area, Volume fields of a Product since these values can be negative numbers.

Proof of Concept

1.After login, in the top menu bar, click Products
2.In the left menu bar, click List to view the list of products
3.Click any product to go to the product details.
4.In the product details, click MODIFY button
5.In the Weight, Length x Width x Height, Area, Volume fields, enter negative values and clickSAVE button.

Impact

This vulnerability is capable of the unlogic in the Weight, Length x Width x Height, Area, Volume fields of a Product.