Skip to content
Threat Feed
Subscribe

Product

Dolibarr (20.0.0-23.0.4)

1 brief RSS
high advisory

Dolibarr: Insecure Direct Object Reference in expense report API (CVE-2026-125754)

An IDOR vulnerability in the Dolibarr expense report API allows authenticated users with minimal privileges to access and manipulate payment records belonging to other users.

Dolibarr +1 idor api-vulnerability financial-system vulnerability
1t 1c