GitHub Advisoryadvisory · Packagist
GHSA-6773-rfjv-c54w Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
HIGH
Official page ↗
- Aliases
- CVE-2023-38886
- Ecosystem
- Packagist
- Packages
- dolibarr/dolibarr
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78, CWE-94
- Reviewed
- 2023-09-21
Affected packages
• Packagist dolibarr/dolibarr: < 17.0.1 → fixed in 17.0.1
Description
An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script.
Related
Alias · CVE (1)
- CVE-2023-38886 An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script. vulnerability