Lucene search
Veracode Vulnerability DatabaseVERACODE:46504HistoryApr 18, 2024 - 7:05 a.m.
Session Hijacking
2024-04-1807:05:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
dolibarr
session hijacking
user session management
csrf protection
account takeover
dolibarr/dolibarr is vulnerable to Session Hijacking. The vulnerability is due to inadequate user session management, allowing authenticated attackers to hijack victim users’ session cookies and gain access to the CSRF protection tokens through interaction with a malicious web page, consequently leading to account takeover.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 19.0.0 | |
| dolibarr/dolibarr | le | 19.0.0 |
Related
cve
cve
CVE-2024-31503
2024-04-17 00:15:07
osv
osv
Dolibarr vulnerable to Cross-Site Request Forgery
2024-04-17 00:30:57
nvd
nvd
CVE-2024-31503
2024-04-17 00:15:07
ubuntucve
ubuntucve
CVE-2024-31503
2024-04-17 00:00:00
cvelist
cvelist
CVE-2024-31503
2024-04-16 00:00:00
github
github
Dolibarr vulnerable to Cross-Site Request Forgery
2024-04-17 00:30:57