Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0ycndoLTI2MnItcjg1as4AAhdz

Dolibarr ERP and CRM malicious executable loading

Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. However, the application performs insufficient checks on the export parameters to mysqldump, which can lead to execution of arbitrary binaries on the server. (Malicious binaries can be uploaded by abusing other functionalities of the application.)

Permalink: https://github.com/advisories/GHSA-2rwh-262r-r85j
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ycndoLTI2MnItcjg1as4AAhdz
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: over 1 year ago

CVSS Score: 8.8
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Percentage: 0.0018
EPSS Percentile: 0.55506

Identifiers: GHSA-2rwh-262r-r85j, CVE-2019-11200
References:

• https://nvd.nist.gov/vuln/detail/CVE-2019-11200
• https://know.bishopfox.com/advisories/dolibarr-version-9-0-1-vulnerabilities
• https://github.com/Dolibarr/dolibarr/issues/10984#issuecomment-488297419
• https://github.com/Dolibarr/dolibarr/commit/d6ae62478c8841fdfe58971494818b599f396d4f
• https://github.com/Dolibarr/dolibarr/commit/01075081cbcd9130a72115cdb50ee61fc394edc1
• https://github.com/advisories/GHSA-2rwh-262r-r85j

Repository: https://github.com/Dolibarr/dolibarr
Blast Radius: 6.8

Affected Packages