DEV Community

Dolibarr Security Findings Series' Articles

Back to Amartya Jha's Series
The Back-Office Break-In: Nine Dolibarr Findings
Cover image for The Back-Office Break-In: Nine Dolibarr Findings
codeant-security profile

The Back-Office Break-In: Nine Dolibarr Findings

#cybersecurity #vulnerabilities #penetrationtesting #security
Comments
4 min read
CVE-2026-71503 · One link, opened once, mints a second admin
codeant-security profile

CVE-2026-71503 · One link, opened once, mints a second admin

#cybersecurity #ai #security #penetrationtesting
Comments
6 min read
CVE-2026-71504 · The membership desk that could reset the admin's password
codeant-security profile

CVE-2026-71504 · The membership desk that could reset the admin's password

#cybersecurity #security #penetrationtesting #opensource
Comments
5 min read
CVE-2026-71505 · The read desk checks your ID. The write desk doesn't.
codeant-security profile

CVE-2026-71505 · The read desk checks your ID. The write desk doesn't.

#cybersecurity #penetrationtesting #opensource #security
Comments
4 min read
CVE-2026-71506 · The wrong key on the lock
codeant-security profile

CVE-2026-71506 · The wrong key on the lock

#cybersecurity #security #penetrationtesting #opensource
Comments
4 min read
CVE-2026-71507 · Change one number, and the payroll run pays you
codeant-security profile

CVE-2026-71507 · Change one number, and the payroll run pays you

#cybersecurity #penetrationtesting #security #opensource
Comments
5 min read
CVE-2026-71508 · Set your own salary — and the receipt hides it
codeant-security profile

CVE-2026-71508 · Set your own salary — and the receipt hides it

#security #cybersecurity #opensource #penetrationtesting
Comments
4 min read
CVE-2026-71509 · Approve your own expenses — and your whole team's
codeant-security profile

CVE-2026-71509 · Approve your own expenses — and your whole team's

#cybersecurity #penetrationtesting #opensource #security
Comments
4 min read
CVE-2026-71510 · Ask enough yes/no questions and you know everyone's salary
codeant-security profile

CVE-2026-71510 · Ask enough yes/no questions and you know everyone's salary

#security #cybersecurity #opensource #penetrationtesting
Comments
5 min read
CVE-2026-71511 · Read a member's card, receive their password hash
codeant-security profile

CVE-2026-71511 · Read a member's card, receive their password hash

#cybersecurity #security #opensource #penetrationtesting
Comments
4 min read