Dolibarr.ERP.CRM.3.Command.Injection

Description

This indicates an attack attempt against a Command Execution vulnerability in Dolibarr ERP & CRM.
The vulnerability is caused by an error when the vulnerable software handles a malicious request. It allows a remote attacker to execute arbitrary commands via sending a crafted request.

Affected Products

Dolibarr 3.1.1
Dolibarr 3.2.0

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Upgrade to 3.2.X branch available from the website.
http://www.dolibarr.org/

References