CVE-2023-33568

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-33568
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-33568.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-33568
Aliases
Downstream
Published
2023-06-13T15:15:14.147Z
Modified
2026-03-13T07:38:03.118698Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.

References

Affected packages

Git / github.com/dolibarr/dolibarr

Affected ranges

Type
GIT
Repo
https://github.com/dolibarr/dolibarr
Events
Introduced
ad673b3207506de03ee8e745399e3a19505900d2
Fixed
3f45699695d733e602db61ccd6daaadb7dc40654
Fixed
bb7b69ef43673ed403436eac05e0bc31d5033ff7
Fixed
be82f51f68d738cce205f4ce5b469ef42ed82d9e
Database specific 
{
    "versions": [
        {
            "introduced": "16.0.0"
        },
        {
            "fixed": "16.0.5"
        }
    ]
}

Affected versions

16.*
16.0.0
16.0.1
16.0.2
16.0.3
16.0.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-33568.json"