Vulnerabilities > CVE-2023-33568 - Files or Directories Accessible to External Parties vulnerability in Dolibarr Erp/Crm 16.0.0/16.0.1/16.0.2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
dolibarr
CWE-552
NVD
Published: 2023-06-13
Updated: 2023-06-23

Summary

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.

Vulnerable Configurations

Part Description Count
Application
Dolibarr
3

Common Weakness Enumeration (CWE)

References