GHSA-6ppg-rgrg-f573
Dolibarr vulnerable to Cross-Site Request Forgery
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | dolibarr/dolibarr | <= 19.0.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim users' session cookies and CSRF protection tokens via user interaction with a crafted web page, leading to account takeover.
References
External links from the advisory. They lead to third-party sites.