{"action":"Upgrade dolibarr/dolibarr to 17.0.1 or later.","affected":[{"fixed":"17.0.1","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2023-38886"],"ecosystem":"Packagist","epss":0.29613,"exploited":false,"fixed_versions":["17.0.1"],"ghsa_id":"GHSA-6773-rfjv-c54w","id":"tcs_01M5KEWSHW5N5469TTHQ841E4Q","modified_at":"2025-04-03T15:26:54.196446Z","published_at":"2023-09-20T03:30:17Z","references":["https://osv.dev/vulnerability/GHSA-6773-rfjv-c54w","https://nvd.nist.gov/vuln/detail/CVE-2023-38886","https://akerva.com/wp-content/uploads/2023/09/AKERVA_Security-Advisory_CVE-2023-38886_Dolibarr_RCE-1.pdf","https://github.com/Dolibarr/dolibarr","http://dolibarr.com"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-6773-rfjv-c54w","url":"https://osv.dev/vulnerability/GHSA-6773-rfjv-c54w"}],"summary":"Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script"}