CVE-2021-36625: Dolibarr Erp/crm

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 (fixed version is 14.0.0) via a POST request to the country_id parameter in an UPDATE statement.

Affected products

• Dolibarr Dolibarr Erp/crm: version 13.0.2 only

Published 2022-03-31. Last modified 2026-06-17.