{"vulnerability": "CVE-2023-33568", "sightings": [{"uuid": "d693ca46-0c96-4cf6-8c95-91f7ff2b6f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33568", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}, {"uuid": "e02138d3-e92e-469e-8d3d-abe0f483a8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33568", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dolibarr_16_contact_dump.rb", "content": "", "creation_timestamp": "2023-05-30T15:27:30.000000Z"}, {"uuid": "462c2c20-53cd-4e93-94fc-93b1c16ac27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33568", "type": "published-proof-of-concept", "source": "https://t.me/arvinclub1/387", "content": "CVE-2023-33568 Dolibarr Unauthenticated Contacts Database\n\n{{BaseURL}}/public/ticket/ajax/ajax.php?action=getContacts&email=%\nhttps://github.com/projectdiscovery/nuclei-templates/pull/7488/files", "creation_timestamp": "2023-06-20T08:10:54.000000Z"}, {"uuid": "63288783-a337-43be-a4da-5d4378c4a7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33568", "type": "seen", "source": "https://t.me/cibsecurity/65161", "content": "\u203c CVE-2023-33568 \u203c\n\nAn issue in Dolibarr v16.0.0 to v16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-13T18:15:40.000000Z"}, {"uuid": "85df929e-34c6-4ca3-9165-f183c181c460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33568", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dolibarr_16_contact_dump.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Vladimir TOUTAIN\", \"Nolan LOSSIGNOL-DRILLIEN\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Dolibarr version 16 < 16.0.5 is vulnerable to a pre-authentication contact database dump.\\n          An unauthenticated attacker may retrieve a company's entire customer file, prospects, suppliers,\\n          and potentially employee information if a contact file exists.\\n          Both public and private notes are also included in the dump.\", \"disclosure_date\": \"2023-03-14\", \"fullname\": \"auxiliary/scanner/http/dolibarr_16_contact_dump\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Dolibarr 16 pre-auth contact database dump\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/dolibarr_16_contact_dump.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/dolibarr_16_contact_dump\", \"references\": [\"CVE-2023-33568\", \"URL-https://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump/\", \"URL-https://github.com/Dolibarr/dolibarr/blob/16.0.5/ChangeLog#L34\", \"URL-https://github.com/Dolibarr/dolibarr/commit/bb7b69ef43673ed403436eac05e0bc31d5033ff7\", \"URL-https://github.com/Dolibarr/dolibarr/commit/be82f51f68d738cce205f4ce5b469ef42ed82d9e\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:30.968292Z"}]}