An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 in the forgot-password function becuase the application allows email addresses as usernames which can cause a Denial of Service.