Skip to content
OpenAdvisories

Product · Dolibarr

ERP

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3

    Dolibarr ERP User Notes note.php authorization

    A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handler. The manipulation of the argument ID leads to authorization bypass. The attac…

  • Medium 6.3

    Dolibarr ERP TakePOS invoice.php fail authorization

    A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The n…