GHSA-wppr-j57c-8jpm
Improper Authorization in dolibarr/dolibarr
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | dolibarr/dolibarr | < 15.0.0 | 15.0.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
An Improper Authorization vulnerability exists in Dolibarr versions prior to version 15.0.0. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
References
External links from the advisory. They lead to third-party sites.