CVE-2023-38886

HighCVSS 7.2

Published: 20/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

28.75%

98th percentile - higher than 98% of all known CVEs

Summary

A vulnerability in Dolibarr ERP CRM version 17.0.1 and earlier allows a remote privileged attacker to execute arbitrary code via a crafted command or script.

Risk Assessment

The risk involves potential system takeover by a privileged user, leading to data theft, modification, or full server compromise.

Recommendation

Immediately update Dolibarr ERP CRM to the latest available version and restrict user privileges to the minimum necessary.

Original NVD description (English source)

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script.