CVE-2023-4198

Summary

CVE-2023-4198 is a newly discovered access control vulnerability in Dolibarr ERP CRM versions up to 17.0.3. This issue permits an authenticated, yet unauthorized user to gain unintended access to a customer database table, potentially exposing sensitive data. The vulnerability arises from the application's failure to enforce proper access control measures, putting customer information at risk. Dolibarr users are advised to upgrade to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.