Em resumo
- CVE-2021-3991 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta dolibarr/dolibarr, dolibarr erp/crm (dolibarr).
- Chance de exploração nos próximos 30 dias (EPSS): 0.33%, maior que 26.2% das vulnerabilidades.
- Correção: atualize para 15.0.0, 20.0.2 ou posterior.
Description
An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
NVD description
An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
Mais vulnerabilidades de dolibarr/dolibarr
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free