CVE-2018-25357: Dolibarr ERP CRM Remote Code Evaluation Vulnerability
Summary
CVE-2018-25357: Dolibarr ERP CRM contains a remote code evaluation vulnerability. Affects dolibarr/dolibarr across 2 version ranges.
< 6.0.8
>= 7.0.0, < 7.0.4
Fixed in 6.0.8 or 7.0.4, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Dolibarr ERP CRM is an open-source software suite designed for managing business processes, including ERP and CRM functionalities. It provides tools for invoicing, project management, and customer relationship management. The software is widely used by small and medium enterprises due to its flexibility and ease of use. However, certain versions of Dolibarr are vulnerable to a critical security flaw that allows unauthorized remote code execution, posing significant risks to users' data and system integrity.
Vulnerability Detail
Dolibarr ERP CRM version 7.0.3 contains a remote code evaluation vulnerability that allows unauthenticated attackers to execute arbitrary PHP code through the 'db_name' parameter. This vulnerability arises when attackers send a specially crafted POST request to the 'install/step1.php' endpoint, injecting malicious PHP code. Subsequently, they can execute commands via the 'check.php' endpoint using the 'cmd' GET parameter. The implications of this vulnerability are severe, as it can lead to complete system compromise and unauthorized access to sensitive data.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 6.0.86.0.8composer require dolibarr/dolibarr:6.0.8 -
>= 7.0.0, < 7.0.47.0.4composer require dolibarr/dolibarr:7.0.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users are advised to restrict access to the vulnerable endpoints ('install/step1.php' and 'check.php') by implementing server-side access controls or firewall rules to prevent unauthorized access until the software can be updated.
Conclusion
CVE-2018-25357 represents a critical security vulnerability in Dolibarr ERP CRM that can lead to severe consequences if not addressed. Users are strongly encouraged to update their installations to the latest version to mitigate the risks associated with this vulnerability. Additionally, implementing temporary workarounds can help protect systems until updates are applied.
See every vulnerability recorded for dolibarr/dolibarr →
FAQ
CVE-2018-25357 is a vulnerability in Dolibarr ERP CRM that allows remote code execution through a flaw in the handling of the 'db_name' parameter.
Versions 7.0.0 to 7.0.3 are affected by this vulnerability. Users should upgrade to version 7.0.4 or later.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to unauthorized access, data breaches, and complete system compromise, allowing attackers to execute arbitrary commands on the server.
The CVSS score for CVE-2018-25357 is 9.8, indicating a critical level of severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for dolibarr/dolibarr.
