| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | = 7.0.0 | |
| dolibarr erp/crm | = 7.0.0 |
Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free