GHSA-wppr-j57c-8jpm

ghsaUSosv

Improper Authorization in dolibarr/dolibarr

view advisory published 2024-11-15Licence: CC-BY-4.0

An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-3991US	medium4.3	0.33% (26th)	—	2024-11-15
An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access s…

references

External citations — patches, advisories, analysis.

https://github.com/dolibarr/dolibarrPACKAGE
https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568fWEB
https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-3991ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan