CVE-2023-38888

2023-09-2000:00:00

mitre

www.cve.org

cross site scripting

dolibarr erp

remote attacker

sensitive information

arbitrary code

rest api

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.