CVE-2020-13240: Dolibarr Stored Cross-site Scripting
Summary
CVE-2020-13240: Dolibarr Stored Cross-site Scripting. Affects dolibarr/dolibarr versions 11.0.4. No fix is published. How to fix ↓
Also tracked for
- dolibarr · Bitnami
The same CVE-2020-13240 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Dolibarr is an open-source ERP and CRM software package that provides various functionalities for managing business processes. It includes a DMS/ECM module that allows users to upload and manage documents. However, in Dolibarr version 11.0.4, there is a vulnerability that allows users with the 'Setup documents directories' permission to rename uploaded files with insecure file extensions. This bypasses the .noexe protection mechanism and can lead to cross-site scripting (XSS) attacks.
Vulnerability Detail
The vulnerability in Dolibarr version 11.0.4 arises from the ability of users with specific permissions to rename uploaded files with insecure file extensions. This allows an attacker to upload a file with a malicious script and execute it in the context of another user's session. The impact of this vulnerability can range from stealing sensitive information to performing unauthorized actions on behalf of the victim. The vulnerability has a CVSS score of 5.4, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the 'Setup documents directories' permission for all users who do not require it. This can be done by modifying the user roles and permissions in the Dolibarr administration panel. By limiting the number of users with this permission, the risk of exploitation can be reduced.
Conclusion
The Dolibarr version 11.0.4 is vulnerable to a stored cross-site scripting (XSS) attack due to a flaw in the DMS/ECM module. Users are advised to upgrade to a patched version of Dolibarr to mitigate this vulnerability. Alternatively, they can temporarily disable the 'Setup documents directories' permission for users who do not need it. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for dolibarr/dolibarr →
FAQ
Dolibarr is an open-source ERP and CRM software package that provides various functionalities for managing business processes.
The DMS/ECM module in Dolibarr allows users to upload and manage documents within the system.
The vulnerability allows for cross-site scripting (XSS) attacks, which can lead to the theft of sensitive information or unauthorized actions on behalf of the victim.
To fix this vulnerability, it is recommended to upgrade to a patched version of Dolibarr.
Yes, users can temporarily disable the 'Setup documents directories' permission for users who do not require it.
Related vulnerabilities
Recent vulnerabilities recorded for dolibarr/dolibarr.
