CVE-2021-3991

Description

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

Reserved 2021-11-20 | Published 2024-11-15 | Updated 2024-11-15 | Assigner @huntr_ai

Problem types

CWE-285 Improper Authorization

Product status

Any version before develop
affected

References

huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67

github.com/...ommit/63cd06394f39d60784d6e6a0ccf4867a71a6568f

cve.org (CVE-2021-3991)

nvd.nist.gov (CVE-2021-3991)

Download JSON