CVE-2017-9840: Dolibarr

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.

Affected products

• Dolibarr Dolibarr: up to and including 5.0.3

Published 2017-06-25. Last modified 2026-06-17.