high7.2
CVE-2023-38886
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Impact
An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | dolibarr/dolibarr | < 17.0.1 | 17.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dolibarr | Dolibarr Erp\/Crm | through 17.0.1 |