← Back to browse · API

CVE-2023-30253

Severity
HIGH
CVSS
8.8
EPSS
0.79335
Risk score
62.97
CISA KEV
No
PoC
No
Published
2023-05-29
Modified
2025-01-14
First seen
2026-08-07
Aliases
EUVD-2023-1519, GHSA-9WQR-5JP4-MJMH
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-1519

Description

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.

References