BIT-dolibarr-2021-3991

vendorUSosv

Improper Authorization in dolibarr/dolibarr

view advisory published 2025-04-03Licence: per source

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-3991US	medium4.3	0.33% (26th)	—	2024-11-15
An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access s…

references

External citations — patches, advisories, analysis.

https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568fWEB
https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-3991WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan