CVE-2021-37517

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-37517

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37517.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-37517

Aliases

Downstream

UBUNTU-CVE-2021-37517

Published

2022-03-31T19:15:08.060Z

Modified

2026-04-10T04:35:55.171220Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.

References

https://github.com/Dolibarr/dolibarr/commit/b57eb8284e830e30eefb26e3c5ede076ea24037c

Affected packages

Git / github.com/dolibarr/dolibarr

Affected ranges

Type

GIT

Repo

https://github.com/dolibarr/dolibarr

Events

Introduced

Last affected

8243ffc174603084237bf6f6ce4f395811e7d617

Fixed

b57eb8284e830e30eefb26e3c5ede076ea24037c

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.0.2"
        }
    ]
}

Affected versions

13.*

13.0.0

13.0.1

13.0.2

14.*

14.0.0

3.*

3.3.beta1_20121221

3.4.beta1_20130429

3.4.beta1_20130502

3.5.beta1_20131106

3.5.beta1_20131120

3.6.0

3.6.0-alpha

3.6.0-beta

3.6.1

3.6.2

3.6.beta1_20140514

3.7.0

3.7.1

3.8.0-beta

4.*

4.0.0-rc

5.*

5.0.0-beta

6.*

6.0.0-beta

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37517.json"