Dolibarr Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2017-17898 - Vulnerability Database

Dolibarr Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2017-17898

High

Reference: CVE-2017-17898

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-17898

Title: Dolibarr Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Overview:

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to .tpl.php files which allows remote attackers to obtain sensitive information.