CVE-2020-13239: Dolibarr Stored Cross-site Scripting via file upload
Summary
CVE-2020-13239: Dolibarr Stored Cross-site Scripting via file upload. Affects dolibarr/dolibarr versions 11.0.4. No fix is published. How to fix ↓
Also tracked for
- dolibarr · Bitnami
The same CVE-2020-13239 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Dolibarr is an open-source ERP and CRM system designed for small and medium-sized businesses. It provides a wide range of features for managing various aspects of business operations, including sales, inventory, invoicing, and more. The DMS/ECM module in Dolibarr allows users to upload and manage documents within the system.
Vulnerability Detail
The DMS/ECM module in Dolibarr version 11.0.4 is vulnerable to a stored cross-site scripting (XSS) attack. When a user uploads an HTML file, the system renders it in the browser without proper sanitization. This allows an attacker to inject malicious scripts into the HTML file, which will be executed when other users view the file. The vulnerability occurs when the attachment parameter is removed from the direct download link, causing the HTML file to be displayed directly in the browser.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid uploading HTML files to the DMS/ECM module in Dolibarr. Instead, it is recommended to use alternative file formats that do not pose a risk of XSS attacks, such as PDF or plain text files.
Conclusion
In conclusion, Dolibarr version 11.0.4 is vulnerable to a stored XSS attack in the DMS/ECM module. This allows an attacker to execute malicious scripts in the context of other users. To mitigate this risk, it is recommended to update Dolibarr to a version that includes the fix for this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for dolibarr/dolibarr →
FAQ
The vulnerability allows an attacker to execute arbitrary scripts in the context of other users, potentially leading to unauthorized access, data theft, or other malicious activities.
No, authentication is not required. An attacker can exploit this vulnerability by tricking a user into opening a specially crafted HTML file.
No, only Dolibarr version 11.0.4 is affected. The vulnerability has been fixed in later versions.
There are no known public exploits for this vulnerability at the time of this report. However, it is important to apply the recommended fixes to mitigate the risk.
You can use Vulert's playground (https://vulert.com/scanner) to check if your Dolibarr installation is affected by this vulnerability. Simply provide the composer.lock file from your Dolibarr installation, and Vulert will analyze it for any known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for dolibarr/dolibarr.
