CyberRota Analysis
AI-GeneratedDolibarr versions prior to 24.0.1 are vulnerable to a case-sensitive denylist bypass in the sqlfilters API, allowing authenticated attackers to exploit case-insensitivity in database column resolution. This vulnerability enables attackers to retrieve sensitive database fields, including full password hashes for all user accounts, potentially compromising administrative access. Organizations using Dolibarr should prioritize patching to mitigate the risk of unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylist-protected field names. Attackers can exploit the case-insensitive database column resolution against the case-sensitive denylist check in the core library to use prefix-matching predicates as a boolean oracle and extract full password hashes for any user account, including administrators.