What is GHSA-xw7v-qrhc-jjg2?

GHSA-xw7v-qrhc-jjg2 is a security advisory published by GitHub Security Advisories with High severity. Access Control vulnerability in Dolibarr

Which CVE IDs does GHSA-xw7v-qrhc-jjg2 cover?

GHSA-xw7v-qrhc-jjg2 covers the following CVE IDs: CVE-2021-37517. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xw7v-qrhc-jjg2?

GHSA-xw7v-qrhc-jjg2 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-xw7v-qrhc-jjg2?

GHSA-xw7v-qrhc-jjg2 affects 1 product, including: composer/dolibarr/dolibarr:\u003c 14.0.1.

GHSA-xw7v-qrhc-jjg2HighCVSS 7.5

Access Control vulnerability in Dolibarr

Vendor

GitHub Security Advisories

Published

April 1, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-37517 →

📋 Description

An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.1, in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.

🎯 Affected products1

composer/dolibarr/dolibarr:< 14.0.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-37517
https://github.com/Dolibarr/dolibarr/commit/b57eb8284e830e30eefb26e3c5ede076ea24037c
https://github.com/Dolibarr/dolibarr/releases/tag/14.0.1
https://github.com/advisories/GHSA-xw7v-qrhc-jjg2