CVE-2023-4198

Dolibarr ERP CRM (<= 17.0.3) Improper Access Control

Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data

Affected

Dolibarr · Dolibarr ERP CRM

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.56% chance of exploitation in the next 30 days, 45th percentile

Published

2023-11-01

Updated

2024-09-05

Proof-of-concept exploits (1)

• https://starlabs.sg/advisories/23/23-4198

Security advisories

• advisories/GHSA-48v2-596x-4jr9
• Dolibarr/dolibarr/commit/3065b9ca6ade988e8d7a8a8550415c0abb56b9cb#diff-7d68365a708c954051…

References

• CVE Record
• NVD entry