Miggo Logo

CVE-2022-43138: Dolibarr vulnerable to privilege escalation

9.8

CVSS Score
3.1

Basic Information

EPSS Score
0.29623%
Published
11/17/2022
Updated
2/1/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
dolibarr/dolibarrcomposer< 14.0.114.0.1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability stems from missing authorization checks in multiple API user management methods. The GitHub patch adds critical permission validations (lire/creer rights checks) and field restrictions in:

  1. put() - Added admin status/entity validation and permission checks
  2. getInfo() - Added lire permission requirement
  3. post() - Enforced creer permission These functions previously had commented-out or missing checks, allowing attackers to manipulate user accounts through the API without proper authorization. The exploit demonstrates how modifying admin email via put() could lead to account takeover.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

*oli**rr Op*n Sour** *RP & *RM *or *usin*ss ***or* v**.*.* *llows *tt**k*rs to *s**l*t* privil***s vi* * *r**t** *PI.

Reasoning

T** vuln*r**ility st*ms *rom missin* *ut*oriz*tion ****ks in multipl* *PI us*r m*n***m*nt m*t*o*s. T** *it*u* p*t** ***s *riti**l p*rmission v*li**tions (lir*/*r**r ri**ts ****ks) *n* *i*l* r*stri*tions in: *. put() - ***** **min st*tus/*ntity v*li**