{"action":"Upgrade dolibarr/dolibarr to 17.0.1 or later.","affected":[{"fixed":"17.0.1","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2023-38887"],"ecosystem":"Packagist","epss":0.01533,"exploited":false,"fixed_versions":["17.0.1"],"ghsa_id":"GHSA-g8h7-mcp6-pf47","id":"tcs_01M5KF2GBB2S57M2Z3YP7V7XMR","modified_at":"2025-04-03T15:26:56.203405Z","published_at":"2023-09-20T03:30:17Z","references":["https://osv.dev/vulnerability/GHSA-g8h7-mcp6-pf47","https://nvd.nist.gov/vuln/detail/CVE-2023-38887","https://akerva.com/wp-content/uploads/2023/09/AKERVA_Security-Advisory_CVE-2023-38887_Dolibarr_AFU.pdf","https://github.com/Dolibarr/dolibarr","http://dolibarr.com"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-g8h7-mcp6-pf47","url":"https://osv.dev/vulnerability/GHSA-g8h7-mcp6-pf47"}],"summary":"File Upload vulnerability in Dolibarr ERP CRM"}