| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | ≤ 19.0.0 | |
| dolibarr erp/crm | < 19.0.1 | 19.0.1 |
Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free