CVE-2023-38887

Summary

CVE-2023-38887 is a file upload vulnerability affecting Dolibarr ERP CRM versions 17.0.1 and earlier. An attacker can exploit this flaw by uploading a malicious file, which then allows for the execution of arbitrary code and the exfiltration of sensitive information. This vulnerability lies in the extension filtering and renaming functions, enabling remote code injection and potential data theft.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.