github.com
https://github.com/Dolibarr/dolibarr CVE-2022-43138
CRITICAL
Dolibarr vulnerable to privilege escalation
Record summary
CVE-2022-43138 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 30, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
dolibarr/dolibarrBrowse Packagist / dolibarr/dolibarr | GitHub Advisory | Before 14.0.1 · Fixed in 14.0.1 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBDolibarr ERP 14.0.1 - Privilege EscalationExploitDB exploitby Vishwaraj BhattraiNot analyzed1 file
References
4github.com
https://github.com/Dolibarr/dolibarr/commit/489cff46a37b04784d8e884af7fc2ad623bee17d nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-43138 exploit-db.com
https://www.exploit-db.com/exploits/50248