In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks
published April 16, 2020
CVSS
—
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is
In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01011 · 62.8th percentile
Published
2020-04-16T19:03Z
EPSS history
Timeline
16 APR 19:03Z
In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks