What is GHSA-4xc7-x2jr-cr74?

GHSA-4xc7-x2jr-cr74 is a security advisory published by GitHub Security Advisories with Medium severity. Improper Authorization in dolibarr/dolibarr

Which CVE IDs does GHSA-4xc7-x2jr-cr74 cover?

GHSA-4xc7-x2jr-cr74 covers the following CVE IDs: CVE-2022-0731. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4xc7-x2jr-cr74?

GHSA-4xc7-x2jr-cr74 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-4xc7-x2jr-cr74?

GHSA-4xc7-x2jr-cr74 affects 1 product, including: composer/dolibarr/dolibarr:\u003c 16.0.

GHSA-4xc7-x2jr-cr74MediumCVSS 6.5

Improper Authorization in dolibarr/dolibarr

Vendor

GitHub Security Advisories

Published

February 24, 2022

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2022-0731 →

📋 Description

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more.

🎯 Affected products1

composer/dolibarr/dolibarr:< 16.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-0731
https://github.com/dolibarr/dolibarr/commit/209ab708d4b65fbd88ba4340d60b7822cb72651a
https://huntr.dev/bounties/e242ab4e-fc70-4b2c-a42d-5b3ee4895de8
https://github.com/advisories/GHSA-4xc7-x2jr-cr74