HIGH

CVE-2023-30253

CVSS v3

8.8

HIGH

EPSS Score

88.2%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.

Technical details

Published
5/29/2023

Frequently asked questions

What is CVE-2023-30253?

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.

Is CVE-2023-30253 actively exploited?

Active exploitation of CVE-2023-30253 has not been confirmed. The EPSS score is 88.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-30253?

CVE-2023-30253 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2023-30253 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.