CVE-2023-38886: Dolibarr Erp/crm

High severity, CVSS 7.2. EPSS: 31.7% chance of exploitation in the next 30 days.

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a crafted command/script.

Affected products

• Dolibarr Dolibarr Erp/crm: up to and including 17.0.1

Published 2023-09-20. Last modified 2026-07-09.