CVE-2023-38886
1 advisory.
Packagist/dolibarr/dolibarr CVE-2023-38886: high 7.2, EPSS 31.72%
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Action: Upgrade dolibarr/dolibarr to 17.0.1 or later.
composer require dolibarr/dolibarr:17.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.0.1 | - |
Fixed versions
| 17.0.1 |
Sources
- osv: GHSA-6773-rfjv-c54w
- https://nvd.nist.gov/vuln/detail/CVE-2023-38886
- https://akerva.com/wp-content/uploads/2023/09/AKERVA_Security-Advisory_CVE-2023-38886_Dolibarr_RCE-1.pdf
- https://github.com/Dolibarr/dolibarr
- http://dolibarr.com
CVE-2023-38886 · published · modified · JSON