CVE-2017-17898: Dolibarr Erp/crm

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.

Affected products

• Dolibarr Dolibarr Erp/crm: version 6.0.4 only

Published 2017-12-27. Last modified 2026-06-17.