Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a third party who indicates that exploitation can only occur if an unprivileged user knows the token of an admin user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-69634 Cross-Site Request Forgery in Dolibarr ERP & CRM v.22.0.9 Enables Privilege Escalation https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69634
Post summary
A CSRF vulnerability (CVE‑2025‑69634) in Dolibarr 22.0.9 enables privilege escalation; no PoC, exploit, or patch information is provided.
[CVE-2025-69634: CRITICAL] Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php#cve,CVE-2025-69634,#cybersecurity https://cvefind.com/CVE-2025-69634
Post summary
The tweet announces a critical CSRF flaw in Dolibarr ERP & CRM v.22.0.9 that permits privilege escalation through the notes field in perms.php.
🔴 CVE-2025-69634 - Critical Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php https://www.thehackerwire.com/vulnerability/CVE-2025-69634/ https://t.co/lMhA9okfe6
Post summary
The post reports a critical CSRF flaw in Dolibarr v.22.0.9 that can lead to privilege escalation; no PoC, exploit, patch, or active exploitation details are included.