Dolibarr ERP CRM before 19.0.2-php8.2 was discovered to contain a remote code execution (RCE) vulnerability via the Computed field parameter under the Users Module Setup function.
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')