Homepage
About Snyk

Improper Authorization Affecting dolibarr/dolibarr package, versions <15.0.0

Severity

 Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-PHP-DOLIBARRDOLIBARR-8382104
  • published 15 Nov 2024
  • disclosed 15 Nov 2024
  • credit am0o0
Report a new vulnerability Found a mistake?

Introduced: 15 Nov 2024

New CVE-2021-3991 Open this link in a new tab
CWE-285 Open this link in a new tab

How to fix?

Upgrade dolibarr/dolibarr to version 15.0.0 or higher.

Overview

dolibarr/dolibarr is a modern and easy to use web software to manage your business.

Affected versions of this package are vulnerable to Improper Authorization via direct URL access. An attacker can view sensitive reception details by accessing specific URLs without the required permissions.

CVSS Scores

version 4.0
version 3.1
Expand this section

Snyk

Recommended
5.3 medium
  • Attack Vector (AV)
    Network
  • Attack Complexity (AC)
    Low
  • Attack Requirements (AT)
    None
  • Privileges Required (PR)
    None
  • User Interaction (UI)
    Passive
  • Confidentiality (VC)
    None
  • Integrity (VI)
    None
  • Availability (VA)
    Low
  • Confidentiality (SC)
    None
  • Integrity (SI)
    None
  • Availability (SA)
    None