CVE-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.

Affected products

Usg Flex 50(W) Series, Usg Flex H Series, Usg20(W)-Vpn Series, Zyxel Atp Series

Dolibarr Dolibarr Erp\/crm

< 17.0.1

CVSS 3.1

8.8 HIGH

EPSS

79.3% (100th percentile)

Weakness

CWE-78

NVD status

Modified

Published

2023-05-29