GitHub Advisoryadvisory · Packagist

GHSA-7x8g-h246-gvx3 Dolibarr authenticated Remote Code Execution

HIGH Published 2022-05-24 Modified 2024-04-24 Official page ↗
Aliases
CVE-2020-35136
Ecosystem
Packagist
Packages
dolibarr/dolibarr
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77, CWE-88
Reviewed
2024-04-24

Affected packages

• Packagist dolibarr/dolibarr: < 12.0.4 → fixed in 12.0.4

Description

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.

Related

Alias · CVE (1)

  • CVE-2020-35136 Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. vulnerability

Weakness · CWE (2)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness
  • CWE-88 Improper Neutralization of Argument Delimiters in a Command weakness

References