~ / search / GHSA-hwmc-v6j6-gc2p

GHSA-hwmc-v6j6-gc2p

Dolibarr Cross Site Request Forgery (CSRF)

Source: GitHub Advisory Database (reviewed) High CVE-2019-1010054

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr 7.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.

References

External links from the advisory. They lead to third-party sites.