Dolibarr up to 24.0.1 REST Documents API redirect

Summaryinfo

A vulnerability classified as problematic has been found in Dolibarr up to 24.0.1. Affected by this issue is some unknown functionality of the component REST Documents API. This manipulation causes redirect. This vulnerability is tracked as CVE-2026-89037. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Dolibarr up to 24.0.1. It has been declared as problematic. Affected by this vulnerability is some unknown processing of the component REST Documents API. The manipulation with an unknown input leads to a redirect vulnerability. The CWE definition for the vulnerability is CWE-601. The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect. As an impact it is known to affect integrity. The summary by CVE is:

Dolibarr before 24.0.2 contains an insecure direct object reference vulnerability in the REST Documents API for the ticket module that allows authenticated API users to access ticket attachments belonging to other companies by omitting a company-scope check that is only applied via a session variable set during public ticket authentication, which REST API authentication never sets. Attackers with ticket read permission can enumerate predictable ticket identifiers and supply them to the documents endpoint or download path to retrieve sensitive attachments such as invoices and contracts belonging to other third parties.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-89037 since 09/10/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1204.001 for this issue.

Upgrading to version 24.0.2 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Enterprise Resource Planning Software

Name

• Dolibarr

Version

• 24.0.0
• 24.0.1

License

• open-source

Website

• Product: https://github.com/Dolibarr/dolibarr/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion