References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Known Affected Software Configurations Switch to CPE 2.2

Change History

OR
     *cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:* versions up to (excluding) 20.0.2

NIST AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NIST CWE-639

https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f No Types Assigned

https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f Patch

https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67 No Types Assigned

https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67 Third Party Advisory

huntr.dev AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

huntr.dev CWE-285

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

huntr.dev https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f [No types assigned]

huntr.dev https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67 [No types assigned]