Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Dolibarr Incorrect Authorization Vulnerability - CVE-2021-37517 - Vulnerability Database
Dolibarr

Dolibarr Incorrect Authorization Vulnerability - CVE-2021-37517

High
Reference: CVE-2021-37517
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-37517
Title: Dolibarr Incorrect Authorization Vulnerability
Overview:

An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0in the forgot-password function becuase the application allows email addresses as usernames which can cause a Denial of Service.