Описание
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:13.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00338
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 3 лет назад
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.
CVSS3: 7.5
debian
больше 3 лет назад
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fix ...
EPSS
Процентиль: 56%
0.00338
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-863