Description

Dolibarr is a web based ERP and CRM open source software

Acunetix determined that it was possible to access the Dolibarr contacts database without authentication

Remediation

Update to the latest patched version of Dolibarr

References

Dolibarr : unauthenticated contacts database theft

Dolibarr 16.0 - Security breach

Related Vulnerabilities

Artifactory CVE-2020-7931 Vulnerability (CVE-2020-7931)

Craft CMS CVE-2024-21622 Vulnerability (CVE-2024-21622)

Moodle Improper Privilege Management Vulnerability (CVE-2023-5549)

Drupal Other Vulnerability (CVE-2005-0682)

MySQL CVE-2016-5635 Vulnerability (CVE-2016-5635)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Known Vulnerabilities CWE-552 CVE-2023-33568