https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:57:45.862774+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25957 CVE-2021-25957 — Account Takeover in "Dolibarr" via Password Reset Functionality 2026-10-08T16:57:45.880974+00:00

Affected: dolibarr

In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the password of any user in the application using the password reset link the user received through email when requested for a forgotten password.