cve/2019/CVE-2019-1010054.md

### [CVE-2019-1010054](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010054)
![](https://img.shields.io/static/v1?label=Product&message=Dolibarr&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross%20ite%20Request%20Forgery%20(CSRF)&color=brighgreen)

### Description

Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls.

### POC

#### Reference
- https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF
- https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF

#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/chaizeg/CSRF-breach
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/hectorgie/PoC-in-GitHub