Описание
Improper Access Control in Dolibarr
In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an administrator has rights to do, the affected field is at “/adherents/note.php?id=1” endpoint.
Пакеты
dolibarr/dolibarr
>= 2.8.1, < 14.0.0
14.0.0
Связанные уязвимости
In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an administrator has rights to do, the affected field is at “/adherents/note.php?id=1” endpoint.
In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an administrator has rights to do, the affected field is at “/adherents/note.php?id=1” endpoint.
In \u201cDolibarr\u201d application, 2.8.1 to 13.0.4 don\u2019t restri ...
Уязвимость системы для планирования ресурсов предприятий и управления взаимоотношений с клиентами Dolibarr, связанная с недостатками контроля доступа, позволяющая нарушителю оказать воздействие на целостность защищаемой информации