CVE-2023-4198: Dolibarr Erp/crm

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data

Affected products

• Dolibarr Dolibarr Erp/crm: up to and including 17.0.3

Published 2023-11-01. Last modified 2026-06-17.