CVE-2022-0731: Dolibarr Erp/crm

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.

Affected products

• Dolibarr Dolibarr Erp/crm: before 16.0.0 (fixed in 16.0.0)

Published 2022-02-23. Last modified 2026-06-17.