CVE-2022-43138: Dolibarr Erp/crm

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

Affected products

• Dolibarr Dolibarr Erp/crm: before 14.0.1 (fixed in 14.0.1)

Published 2022-11-17. Last modified 2026-06-17.