Lucene search

K
githubGitHub Advisory DatabaseGHSA-HWMC-V6J6-GC2P
HistoryMay 24, 2022 - 4:50 p.m.

Dolibarr Cross Site Request Forgery (CSRF)

2022-05-2416:50:37
CWE-352
GitHub Advisory Database
github.com
4

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.6%

Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.

CPENameOperatorVersion
dolibarr/dolibarreq7.0.0

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.6%