CVE-2023-33568
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.
Risk Assessment
The organization may lose sensitive data, leading to potential privacy breaches and reputational damage. Attackers could gain access to sensitive information, which may result in further attacks or fraud.
Recommendation
It is recommended to update Dolibarr to version 16.0.5 or later to mitigate this vulnerability. Additionally, implementing further security measures to restrict access to sensitive data is advisable.
Original NVD description (English source)
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.