CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.

• CWE-552

• https://github.com/Dolibarr/dolibarr/commit/bb7b69ef43673ed403436eac05e0bc31d5033ff7Patch
• https://github.com/Dolibarr/dolibarr/commit/be82f51f68d738cce205f4ce5b469ef42ed82d9ePatch
• https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471Mitigation, Vendor Advisory
• https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471/1Mitigation, Vendor Advisory
• https://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump/Exploit, Third Party Advisory
• https://github.com/Dolibarr/dolibarr/commit/bb7b69ef43673ed403436eac05e0bc31d5033ff7Patch
• https://github.com/Dolibarr/dolibarr/commit/be82f51f68d738cce205f4ce5b469ef42ed82d9ePatch
• https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471Mitigation, Vendor Advisory
• https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471/1Mitigation, Vendor Advisory
• https://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump/Exploit, Third Party Advisory

Published

Jun 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33562User enumeration is found in in PHP Jabbers Time Slots Booki…9.8
• CVE-2023-33563In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of ver…8.8
• CVE-2023-33564There is a Cross Site Scripting (XSS) vulnerability in the "…6.1
• CVE-2023-33565Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-33566Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-33567Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-33569Sourcecodester Faculty Evaluation System v1.0 is vulnerable …7.2
• CVE-2023-3357A NULL pointer dereference flaw was found in the Linux kerne…5.5
• CVE-2023-33570Bagisto v1.5.1 is vulnerable to Server-Side Template Injecti…8.8
• CVE-2023-3358A null pointer dereference was found in the Linux kernel's I…5.5
• CVE-2023-33580Phpgurukul Student Study Center Management System V1.0 is vu…4.8
• CVE-2023-33584Sourcecodester Enrollment System Project V1.0 is vulnerable …9.8