Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Dolibarr Information Disclosure (CVE-2023-33568) - Vulnerability Database

Dolibarr Information Disclosure (CVE-2023-33568)

Description

Dolibarr is a web based ERP and CRM open source software

Invicti determined that it was possible to access the Dolibarr contacts database without authentication

Remediation

Update to the latest patched version of Dolibarr

References

Dolibarr : unauthenticated contacts database theft
Dolibarr 16.0 - Security breach

Related Vulnerabilities

Zend Framework local file disclosure via XXE injection High
Common tags: Information Disclosure Known Vulnerabilities
Drupal 7 arbitrary PHP code execution and information disclosure High
Common tags: Information Disclosure Known Vulnerabilities
TestRail Information Disclosure (CVE-2021-40875) Medium
Common tags: Information Disclosure Known Vulnerabilities
Jira QueryComponent Information Disclosure (CVE-2020-14179) Medium
Common tags: Information Disclosure Known Vulnerabilities
Citrix NetScaler Memory Disclosure 'Citrix Bleed 2' (CVE-2025-5777) Critical
Common tags: Information Disclosure Known Vulnerabilities

Severity

High

Classification

CVE-2023-33568
CWE-552
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure
Known Vulnerabilities