{"id":"CVE-2017-14240","aliases":["GHSA-p9wf-x8h5-44fr"],"url":"https://o3.security/vulnerability/CVE-2017-14240","summary":"Dolibarr ERP and CRM Sensitive Data Disclosure","details":"There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter.","published":"2017-09-11T09:29:00.263Z","modified":"2026-08-07T14:48:54.857876Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"dolibarr/dolibarr","fixedVersion":"6.0.1"}],"fix":{"url":"https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548","label":"Dolibarr/dolibarr@d26b2a6"},"references":[{"type":"FIX","url":"https://github.com/Dolibarr/dolibarr/commit/d26b2a694de30f95e46ea54ea72cc54f0d38e548"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T14:48:54.857876Z"}}