CVE-2021-3991

CVSS V2 None CVSS V3 None

Description

An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

Overview

CVE ID
CVE-2021-3991

Assigner
@huntr_ai

Vulnerability Status
PUBLISHED

Published Version
2024-11-15T10:52:49.304Z

Last Modified Date
2024-11-15T18:26:07.636Z

Weakness Enumerations

CWE	URL
CWE-285	http://cwe.mitre.org/data/definitions/285.html

References

Reference URL	Reference Tags
https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67
https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2021-3991
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3991

History

Created	Old Value	New Value	Data Type	Notes
2024-11-16 12:05:07				Added to TrackCVE