← Database

CVE-2021-37517

HIGH CVSS: 7.5 Published: 2022-03-31 Modified: 2026-06-17

Description

An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.

Affected Platforms

Dolibarr Dolibarr Erp\/Crm

Weakness Type

CWE-863

References