~ / search / GHSA-gh7m-j673-wm97

GHSA-gh7m-j673-wm97

Dolibarr vulnerable to privilege escalation

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-43138

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr < 14.0.1 14.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

References

External links from the advisory. They lead to third-party sites.