Security Advisory

CVE-2023-38888

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-20 00:00:00

Last updated 2024-09-25 15:02:28

Assigner mitre

State PUBLISHED

Description

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.

← Browse all CVEs View on cve.org ↗