GHSA-gh7m-j673-wm97

ghsaUSosv

Dolibarr vulnerable to privilege escalation

view advisory published 2022-11-17Licence: CC-BY-4.0

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-43138US	critical9.8	1.31% (71st)	—	2022-11-17
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.