CVE-2023-4197

CVSS V2 None CVSS V3 None
Description
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.
Overview
  • CVE ID
  • CVE-2023-4197
  • Assigner
  • STAR_Labs
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-11-01T07:58:56.679Z
  • Last Modified Date
  • 2023-11-01T07:58:56.679Z
History
Created Old Value New Value Data Type Notes
2024-06-24 19:17:54 Added to TrackCVE