Description (CNA)
An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| dolibarr / dolibarr/dolibarr | affected unspecified before develop |
CWE
CWE-285
References
- https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67
- https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f
ADP enrichment
No English description supplied.
No references supplied.