| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | < 15.0.0 | 15.0.0 |
| dolibarr erp/crm | < 20.0.2 | 20.0.2 |
An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free