Lucene search
GoogleOSV:GHSA-6PPG-RGRG-F573HistoryApr 17, 2024 - 12:30 a.m.
Dolibarr vulnerable to Cross-Site Request Forgery
2024-04-1700:30:57
Google
osv.dev
6
dolibarr
csrf
vulnerability
erp
crm
session cookies
access control
account takeover
Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users’ session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover.
Related
vulnrichment
vulnrichment
CVE-2024-31503
2024-04-16 00:00:00
cve
cve
CVE-2024-31503
2024-04-17 00:15:07
ubuntucve
ubuntucve
CVE-2024-31503
2024-04-17 00:00:00
nvd
nvd
CVE-2024-31503
2024-04-17 00:15:07
cvelist
cvelist
CVE-2024-31503
2024-04-16 00:00:00
veracode
veracode
Session Hijacking
2024-04-18 07:05:11
github
github
Dolibarr vulnerable to Cross-Site Request Forgery
2024-04-17 00:30:57