Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wppr-j57c-8jpm

Опубликовано: 15 нояб. 2024
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

Improper Authorization in dolibarr/dolibarr

An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

Пакеты

Наименование

dolibarr/dolibarr

composer
Затронутые версииВерсия исправления

< 15.0.0

15.0.0

EPSS

Процентиль: 16%
0.00051
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285
CWE-639

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 1 года назад

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

CVSS3: 4.3
nvd
около 1 года назад

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

CVSS3: 4.3
debian
около 1 года назад

An Improper Authorization vulnerability exists in Dolibarr versions pr ...

EPSS

Процентиль: 16%
0.00051
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-285
CWE-639