CVE-2022-43138

CRITICAL9.8EPSS 0.34%

Dolibarr vulnerable to privilege escalation

Published: 11/17/2022Modified: 4/3/2025
Also known as:GHSA-gh7m-j673-wm97BIT-dolibarr-2022-43138

Description

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (4)