What is the severity of CVE-2019-1010054?

CVE-2019-1010054 is considered to be a critical vulnerability due to its potential to allow malicious actions such as changing user passwords and disabling accounts.

How do I fix CVE-2019-1010054?

To mitigate CVE-2019-1010054, it is advised to upgrade Dolibarr to a version higher than 7.0.0 where the vulnerability has been patched.

What components are affected by CVE-2019-1010054?

CVE-2019-1010054 affects the user password change functionality, user disablement feature, and password encryption processes within Dolibarr.

What are the potential impacts of CVE-2019-1010054?

Exploitation of CVE-2019-1010054 could allow an attacker to change user passwords, disable users, and potentially compromise password encryption.

Who is vulnerable to CVE-2019-1010054?

Any administrator using Dolibarr version 7.0.0 is vulnerable to CVE-2019-1010054, as the attack requires admin access.

Vulnerability/
CVE-2019-1010054

high

8.8

CWE

352

18/7/2019

24/5/2022

5/8/2024

CVE-2019-1010054: CSRF

First published: Thu Jul 18 2019(Updated: )

Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.

Credit: josh@bress.net

Affected Software	Affected Version	How to fix
composer/dolibarr/dolibarr	=7.0.0
Dolibarr ERP & CRM	=7.0.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-1010054?
CVE-2019-1010054 is considered to be a critical vulnerability due to its potential to allow malicious actions such as changing user passwords and disabling accounts.
How do I fix CVE-2019-1010054?
To mitigate CVE-2019-1010054, it is advised to upgrade Dolibarr to a version higher than 7.0.0 where the vulnerability has been patched.
What components are affected by CVE-2019-1010054?
CVE-2019-1010054 affects the user password change functionality, user disablement feature, and password encryption processes within Dolibarr.
What are the potential impacts of CVE-2019-1010054?
Exploitation of CVE-2019-1010054 could allow an attacker to change user passwords, disable users, and potentially compromise password encryption.
Who is vulnerable to CVE-2019-1010054?
Any administrator using Dolibarr version 7.0.0 is vulnerable to CVE-2019-1010054, as the attack requires admin access.

agent/type
collector/github-advisory-latest
source/GitHub
alias/GHSA-hwmc-v6j6-gc2p
alias/CVE-2019-1010054
agent/software-canonical-lookup
agent/weakness
agent/severity
agent/references
agent/author
agent/description
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/first-publish-date
agent/trending
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-cve
source/NVD
package-manager/composer
vendor/dolibarr
canonical/dolibarr erp & crm
version/dolibarr erp & crm/7.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.