CVE-2021-37517: Dolibarr Erp/crm

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.

Affected products

• Dolibarr Dolibarr Erp/crm: version 13.0.2 only

Published 2022-03-31. Last modified 2026-06-17.