GHSA-rg8m-84jf-9367
Incorrect Authorization in Dolibarr
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | dolibarr/dolibarr | < 12.0.0 | 12.0.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter.
References
External links from the advisory. They lead to third-party sites.