Description

The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS.

Remediation

References

CVE-2020-13240

Related Vulnerabilities

WordPress Plugin Statistics Remote Code Execution (1.8)

ATutor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11446)

WordPress Plugin WP Publication Archive 'file' Parameter Directory Traversal (2.3)

Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-6184)

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0447)

Severity

Medium

Classification

CVE-2020-13240 CWE-276 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities