CVE-2023-33568: High severity dolibarr Dolibarr Erp\/crm vulnerability
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-33568?
CVE-2023-33568 is an issue in Dolibarr 16 before 16.0.5 that allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.
How can an attacker exploit CVE-2023-33568?
An attacker can exploit CVE-2023-33568 by performing a database dump and accessing a company's customer file, prospects, suppliers, and employee information.
What is the severity of CVE-2023-33568?
The severity of CVE-2023-33568 is high with a CVSS score of 7.5.
Which version of Dolibarr is affected by CVE-2023-33568?
Versions of Dolibarr 16 before 16.0.5 are affected by CVE-2023-33568.
How to fix CVE-2023-33568?
To fix CVE-2023-33568, upgrade Dolibarr to version 16.0.5 or above.