Threats tagged 'ghsa-jpqr-vpm2-xhh4'

Dolibarr ERP CRM versions before 24.0.2 have a missing authorization vulnerability in the recruitment module. This flaw allows unauthenticated attackers to access unpublished draft job positions by manipulating the ref parameter. Sensitive information such as job titles, descriptions, salary budgets, and recruiter contact details can be disclosed. The vulnerability has a medium severity rating with a CVSS score of 5.3.