{"uuid": "85df929e-34c6-4ca3-9165-f183c181c460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33568", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dolibarr_16_contact_dump.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Vladimir TOUTAIN\", \"Nolan LOSSIGNOL-DRILLIEN\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Dolibarr version 16 < 16.0.5 is vulnerable to a pre-authentication contact database dump.\\n          An unauthenticated attacker may retrieve a company's entire customer file, prospects, suppliers,\\n          and potentially employee information if a contact file exists.\\n          Both public and private notes are also included in the dump.\", \"disclosure_date\": \"2023-03-14\", \"fullname\": \"auxiliary/scanner/http/dolibarr_16_contact_dump\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Dolibarr 16 pre-auth contact database dump\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/dolibarr_16_contact_dump.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/dolibarr_16_contact_dump\", \"references\": [\"CVE-2023-33568\", \"URL-https://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump/\", \"URL-https://github.com/Dolibarr/dolibarr/blob/16.0.5/ChangeLog#L34\", \"URL-https://github.com/Dolibarr/dolibarr/commit/bb7b69ef43673ed403436eac05e0bc31d5033ff7\", \"URL-https://github.com/Dolibarr/dolibarr/commit/be82f51f68d738cce205f4ce5b469ef42ed82d9e\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:30.968292Z"}