Beveiligingsadvies

CVE-2026-82633

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-30 12:34:51

Laatst bijgewerkt 2026-08-31 18:52:40

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users to retrieve group memberships of other users. Attackers can call GET /users/{id}/groups with arbitrary user identifiers to access group names, entity associations, and private notes across tenant boundaries.

← Alle CVE's bekijken Bekijk op cve.org ↗