Description
An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
Remediation
References
Related Vulnerabilities
Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9511)
WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.16)
CubeCart Improper Input Validation Vulnerability (CVE-2012-0865)
Oracle Database Server CVE-2012-0072 Vulnerability (CVE-2012-0072)