What is GHSA-wppr-j57c-8jpm?

GHSA-wppr-j57c-8jpm is a security advisory published by GitHub Security Advisories with Medium severity. Improper Authorization in dolibarr/dolibarr

Which CVE IDs does GHSA-wppr-j57c-8jpm cover?

GHSA-wppr-j57c-8jpm covers the following CVE IDs: CVE-2021-3991. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wppr-j57c-8jpm?

GHSA-wppr-j57c-8jpm has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-wppr-j57c-8jpm?

GHSA-wppr-j57c-8jpm affects 1 product, including: composer/dolibarr/dolibarr:\u003c 15.0.0.

GHSA-wppr-j57c-8jpmMediumCVSS 4.3

Improper Authorization in dolibarr/dolibarr

Vendor

GitHub Security Advisories

Published

November 15, 2024

Last Modified

November 19, 2024

🔗 CVE IDs covered (1)

CVE-2021-3991 →

📋 Description

An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.

🎯 Affected products1

composer/dolibarr/dolibarr:< 15.0.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-3991
https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f
https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67
https://github.com/advisories/GHSA-wppr-j57c-8jpm