CVE-2020-35136

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution

published December 23, 2020

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution. An attacker who has the access the admin dashboard can manipulate the backup function by inserting a payload into the filename for the zipfilename_template parameter to admin/tools/dolibarr_export.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06633 · 93.8th percentile
Published
2020-12-23T14:39Z
EPSS history
Timeline
  • 23 DEC 14:39Z
    Dolibarr 12.0.3 is vulnerable to authenticated Remote Code Execution
    cvelistv5