CVE-2021-3991CWE-285

Improper Authorization in dolibarr/dolibarr

Medium · published November 15, 2024

CVSS v3.0
4.3
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-285 · Improper Authorization
Published
2024-11-15T10:52Z
EPSS history
Timeline
  • 15 NOV 10:52Z
    Improper Authorization in dolibarr/dolibarr
    cvelistv5