← Database

CVE-2022-43138

CRITICAL CVSS: 9.8 Published: 2022-11-17 Modified: 2026-06-17

Description

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

Affected Platforms

Dolibarr Dolibarr Erp\/Crm

Weakness Type

NVD-CWE-Other, CWE-269

References