https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T07:02:26.075806+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-28748 cnvd-2021-28748 2026-10-24T07:02:26.079275+00:00 cnvd-2021-28748 https://cve.radiocsirt.org/vuln/euvd-2026-40824 EUVD-2026-40824 2026-10-24T07:02:26.079305+00:00 EUVD-2026-40824 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11825 fkie_cve-2020-11825 2026-10-24T07:02:26.079319+00:00

In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation.

 https://cve.radiocsirt.org/vuln/ghsa-m66x-wm27-xxpc GHSA-m66x-wm27-xxpc — Dolibarr Cross-Site Request Forgery Vulnerability 2026-10-24T07:02:26.079348+00:00

Affected: Packagist: dolibarr/dolibarr

In Dolibarr 10.0.6, forms are protected with a Cross-Site Request Forgery (CSRF) token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation.

 https://cve.radiocsirt.org/vuln/gsd-2020-11825 gsd-2020-11825 2026-10-24T07:02:26.079371+00:00 gsd-2020-11825 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-11825 UBUNTU-CVE-2020-11825 2026-10-24T07:02:26.079382+00:00

Affected: Ubuntu:Pro:16.04:LTS: dolibarr

In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation.