CVE-2023-4198

MEDIUM 6.5EPSS 0.6%

Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data

CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.56% chance of exploitation in the next 30 days, 44th percentile
Published: 2023-11-01
Updated: 2024-09-05

Proof-of-concept exploits (1)

https://starlabs.sg/advisories/23/23-4198

References

Related