Improper Authorization Vulnerability in Dolibarr

CVE-2021-3991

Summary

An improper authorization issue exists in Dolibarr, which impacts user permissions within the reception section. Users who are normally restricted from accessing certain reception details can exploit this vulnerability by navigating directly to specific URLs, effectively bypassing the intended security measures. This unintended access could lead to unauthorized visibility of sensitive information, posing a risk to data integrity and privacy for users of the Dolibarr ERP & CRM software.

References