CVE-2023-33568

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-33568
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-33568.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-33568
Aliases
Downstream
Published
2023-06-13T00:00:00Z
Modified
2026-07-15T01:49:22.288077352Z
Summary
[none]
Details

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/33xxx/CVE-2023-33568.json",
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/dolibarr/dolibarr

Affected ranges

Type
GIT
Repo
https://github.com/dolibarr/dolibarr
Events
Introduced
ad673b3207506de03ee8e745399e3a19505900d2
Fixed
3f45699695d733e602db61ccd6daaadb7dc40654
Fixed
bb7b69ef43673ed403436eac05e0bc31d5033ff7
Fixed
be82f51f68d738cce205f4ce5b469ef42ed82d9e
Database specific 
{
    "cpe": "cpe:2.3:a:dolibarr:dolibarr_erp\\/crm:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "16.0.0"
        },
        {
            "fixed": "16.0.5"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

16.*
16.0.0
16.0.1
16.0.2
16.0.3
16.0.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-33568.json"