PT-2020-10090 · Dolibarr · Dolibarr Erp/Crm

Daniel Hoffmann · Published 2020-03-16 · Updated 2022-05-24 · CVE-2019-19210

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions prior to 10.0.3

Description The issue allows for XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files. This occurs due to the improper handling of uploaded files, specifically HTML documents, which are still served with a text/html content type even after being renamed with a .noexe extension.

Recommendations For versions prior to 10.0.3, update to version 10.0.3 or later to resolve the issue. As a temporary workaround, consider restricting the upload of HTML documents or ensuring that such files are properly sanitized and served with an appropriate content type to prevent XSS exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-19210

GHSA-87R3-4GC8-F897

Affected Products

Dolibarr Erp/Crm

References · 11

• 🔥 https://herolab.usd.de/security-advisories/usd-2019-0052 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19210 · Security Note
• https://dolibarr.org/forum/dolibarr-changelogs · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-19210 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19210 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-87r3-4gc8-f897 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19210 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19210 · Vendor Advisory
• https://github.com/Dolibarr/dolibarr · Note
• https://herolab.usd.de/en/security-advisories · Note
• https://t.me/cvenotify/1738 · Telegram Post