GHSA-4xc7-x2jr-cr74

ghsaUSosv

Improper Authorization in dolibarr/dolibarr

view advisory published 2022-02-24Licence: CC-BY-4.0

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-0731US	medium6.5OT elevated	1.01% (63rd)	—	2022-02-23
Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.

references

External citations — patches, advisories, analysis.

https://github.com/dolibarr/dolibarrPACKAGE
https://github.com/dolibarr/dolibarr/commit/209ab708d4b65fbd88ba4340d60b7822cb72651aWEB
https://huntr.dev/bounties/e242ab4e-fc70-4b2c-a42d-5b3ee4895de8WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-0731ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan