PT-2020-17266 · Dolibarr · Dolibarr

Yılmaz Değirmenci · Published 2020-12-23 · Updated 2025-04-03 · CVE-2020-35136

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dolibarr version 12.0.3

Description The issue allows for authenticated Remote Code Execution. An attacker with access to the admin dashboard can exploit the backup function by inserting a payload into the zipfilename template parameter in the admin/tools/dolibarr export.php endpoint.

Recommendations For Dolibarr version 12.0.3, consider disabling access to the admin/tools/dolibarr export.php endpoint or restricting the zipfilename template parameter to prevent exploitation until a patch is available.

Exploit

Fix

Argument Injection

Command Injection

Weakness Enumeration

CWE-88

CWE-77

Related Identifiers

BIT-DOLIBARR-2020-35136

CVE-2020-35136

GHSA-7X8G-H246-GVX3

Affected Products

Dolibarr

References · 13

• 🔥 http://bilishim.com/2020/12/18/zero-hunting-2.html · Exploit
• https://github.com/Dolibarr/dolibarr/commit/4fcd3fe49332baab0e424225ad10b76b47ebcbac · Patch
• https://osv.dev/vulnerability/BIT-dolibarr-2020-35136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35136 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35136 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-35136 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-35136 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7x8g-h246-gvx3 · Vendor Advisory
• https://github.com/Dolibarr/dolibarr · Note
• https://github.com/Dolibarr/dolibarr/releases · Note
• https://t.me/cibsecurity/21218 · Telegram Post
• https://sourceforge.net/projects/dolibarr · Note