CVE-2019-1010054: Dolibarr Cross Site Request Forgery (CSRF)
Summary
CVE-2019-1010054: Dolibarr Cross Site Request Forgery (CSRF). Affects dolibarr/dolibarr versions 7.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Dolibarr is an open-source ERP and CRM software package that provides various functionalities for managing business processes. It includes features such as user management, password encryption, and user disablement. However, Dolibarr version 7.0.0 is vulnerable to Cross Site Request Forgery (CSRF) attacks.
Vulnerability Detail
The CSRF vulnerability in Dolibarr 7.0.0 allows malicious HTML to change user passwords, disable users, and disable password encryption. This vulnerability can be exploited by an attacker with admin access by tricking users into visiting malicious URLs.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the official patches or upgrade to a fixed version of Dolibarr.
Conclusion
Dolibarr version 7.0.0 is vulnerable to Cross Site Request Forgery (CSRF), which can allow attackers to change user passwords, disable users, and disable password encryption. It is crucial for Dolibarr users to update their installations to the latest version or apply the necessary security patches to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for dolibarr/dolibarr →
FAQ
Dolibarr is an open-source ERP and CRM software package that helps businesses manage various processes and operations.
Cross Site Request Forgery (CSRF) is an attack that tricks the victim into submitting a malicious request. In this case, it allows an attacker to change user passwords, disable users, and disable password encryption in Dolibarr.
The vulnerability allows an attacker to perform unauthorized actions, such as changing user passwords, disabling users, and disabling password encryption.
To protect your Dolibarr installation, it is crucial to keep the software up to date by applying the latest security patches and updates.
Yes, the Dolibarr development team has released updates that address this vulnerability. Users should update their installations to the latest version available.
References
Related vulnerabilities
Recent vulnerabilities recorded for dolibarr/dolibarr.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
