CVE-2022-43138: Critical severity dolibarr Dolibarr Erp\/crm vulnerability
Published Nov 17, 2022
·Updated
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.
Affected Software
1 affected component
dolibarr Dolibarr Erp\/crm<14.0.1
Event History
Nov 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2022-43138?
CVE-2022-43138 is a vulnerability in Dolibarr Open Source ERP & CRM for Business before v14.0.1 that allows attackers to escalate privileges via a crafted API.
2
How severe is CVE-2022-43138?
CVE-2022-43138 has a severity rating of 9.8, which is considered critical.
3
What software versions are affected by CVE-2022-43138?
CVE-2022-43138 affects Dolibarr Open Source ERP & CRM for Business versions up to but not including v14.0.1.
4
How can an attacker exploit CVE-2022-43138?
An attacker can exploit CVE-2022-43138 by using a crafted API request to escalate privileges.
5
Is there a fix available for CVE-2022-43138?
Yes, upgrading Dolibarr Open Source ERP & CRM to version 14.0.1 or newer will fix CVE-2022-43138.