Detections
Analytics
CVE-2021-3991
medium
Description
An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
References
https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67
https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f