GitHub Advisoryadvisory · Packagist

GHSA-8vq6-5f66-hp3r Logic error in dolibarr/dolibarr

MEDIUM Published 2022-02-26 Modified 2022-03-07 Official page ↗

Aliases: CVE-2022-0746
Ecosystem: Packagist
Packages: dolibarr/dolibarr
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Reviewed: 2022-03-01

Affected packages

• Packagist dolibarr/dolibarr: < 16.0 → fixed in 16.0

Description

In dolibarr/dolibarr prior to 16.0 any low privileged users could update their login name which should only be updated by admin.

Related

Alias · CVE (1)

CVE-2022-0746 Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0. vulnerability

References