Skip to content
Threat Feed

CPE

Cpe:2.3:a:dolibarr:dolibarr_erp\/Crm:*:*:*:*:*:*:*:*

1 brief RSS
high threat

Dolibarr ERP/CRM OS Command Injection (CVE-2023-30253) Exploit Publicly Available

A public exploit is available for an OS Command Injection vulnerability in Dolibarr ERP/CRM versions prior to 17.0.1 (CVE-2023-30253), which allows authenticated users to inject PHP code via the Website/CMS module to obtain a reverse shell as the www-data user.

Dolibarr ERP/CRM < 17.0.1 cve-2023-30253 os command injection rce web application
2r 1t 1c 2i