CVE-2023-33568
1 advisory.
Packagist/dolibarr/dolibarr CVE-2023-33568: high 7.5
Dolibarr vulnerable to unauthenticated database access
Action: Upgrade dolibarr/dolibarr to 16.0.5 or later.
composer require dolibarr/dolibarr:16.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 16.0.0 | 16.0.5 | - |
Fixed versions
| 16.0.5 |
Sources
- osv: GHSA-fpvg-m786-h5vr
- https://nvd.nist.gov/vuln/detail/CVE-2023-33568
- https://github.com/Dolibarr/dolibarr/commit/bb7b69ef43673ed403436eac05e0bc31d5033ff7
- https://github.com/Dolibarr/dolibarr/commit/be82f51f68d738cce205f4ce5b469ef42ed82d9e
- https://github.com/Dolibarr/dolibarr
- https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471
- https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471/1
- https://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump
CVE-2023-33568 · published · modified · JSON