CVE-2024-31503

n/a / n/a PUBLISHED

Description (CNA)

Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-31503.md

ADP enrichment

CVE

No English description supplied.

https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-31503.md

CISA-ADP

No English description supplied.

No references supplied.