Vulnerability Database
299,184
Total vulnerabilities in the database
CVE-2021-25957
In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the password of any user in the application using the password reset link the user received through email when requested for a forgotten password.
| Software | From | Fixed in |
|---|---|---|
dolibarr / dolibarr
|
- | 14.0.0 |
|
dolibarr / dolibarr
|
2.8.1 | 13.0.2.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime