CVE-2017-17898

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information

published December 24, 2017

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02109 · 81.5th percentile
Published
2017-12-24T18:00Z
EPSS history
Timeline
  • 24 DEC 18:00Z
    Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information
    cvelistv5