Business Logic Error Affecting dolibarr/dolibarr package, versions >=0.0.0
Threat Intelligence
EPSS
0.05% (23rd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-DOLIBARRDOLIBARR-2413686
- published 25 Feb 2022
- disclosed 25 Feb 2022
- credit Unknown
Introduced: 25 Feb 2022
CVE-2022-0746 Open this link in a new tabHow to fix?
A fix was pushed into the master branch but not yet published.
Overview
dolibarr/dolibarr is a modern and easy to use web software to manage your business.
Affected versions of this package are vulnerable to Business Logic Error by allowing any low privileged user to update their login name which should only be updated by admin.
References
CVSS Scores
version 3.1