exploitDog

CVE-2023-4198

Опубликовано: 01 нояб. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data

Ссылки

https://github.com/Dolibarr/dolibarr/commit/3065b9ca6ade988e8d7a8a8550415c0abb56b9cb#diff-7d68365a708c954051853ade884c7e97c6ff13150ee92657d6ffc8603e0f947b
Patch
https://starlabs.sg/advisories/23/23-4198
Exploit
Third Party Advisory
https://github.com/Dolibarr/dolibarr/commit/3065b9ca6ade988e8d7a8a8550415c0abb56b9cb#diff-7d68365a708c954051853ade884c7e97c6ff13150ee92657d6ffc8603e0f947b
Patch
https://starlabs.sg/advisories/23/23-4198
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:*

Версия до 17.0.3 (включая)

EPSS

Процентиль: 24%

0.00079

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

CWE-862

Связанные уязвимости

CVE-2023-4198

CVSS3: 6.5

ubuntu

больше 2 лет назад

Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data

CVE-2023-4198

CVSS3: 6.5

debian

больше 2 лет назад

Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unaut ...

GHSA-48v2-596x-4jr9

CVSS3: 6.5

github

больше 2 лет назад

Dolibarr Improper Input Validation vulnerability

EPSS

Процентиль: 24%

0.00079

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

CWE-862