Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:9 p.m.2 views

CVE-2021-3991

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions...

4.3CVSS6.6AI score0.00051EPSS
Exploits0
OSV
OSV
added 2024/11/15 12:31 p.m.7 views

GHSA-WPPR-J57C-8JPM Improper Authorization in dolibarr/dolibarr

An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions...

4.3CVSS4.3AI score0.00051EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/11/15 12:31 p.m.13 views

Improper Authorization in dolibarr/dolibarr

An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions...

4.3CVSS6.7AI score0.00051EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2024/11/15 10:52 a.m.44 views

CVE-2021-3991

CVE-2021-3991 describes an Improper Authorization vulnerability in Dolibarr: versions prior to the develop branch permit a user with restricted permissions in the Reception section to access specific reception details via direct URL, bypassing intended permission checks. The issue affects Dolibar...

4.3CVSS4.4AI score0.00051EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/15 10:52 a.m.10 views

CVE-2021-3991 Improper Authorization in dolibarr/dolibarr

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions...

4.3CVSS6.8AI score0.00051EPSS
Exploits0References2
Rows per page
Query Builder