CVE-2021-3991: Improper Authorization in dolibarr/dolibarr

November 15, 2024

An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the ‘Reception’ section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

References

github.com/advisories/GHSA-wppr-j57c-8jpm
github.com/dolibarr/dolibarr
github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f
huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67
nvd.nist.gov/vuln/detail/CVE-2021-3991

Code Behaviors & Features

Detect and mitigate CVE-2021-3991 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →