Horizon Alert
Summary of the vulnerability and why it matters
This vulnerability allows an authenticated administrator to execute arbitrary operating system commands by manipulating a configuration setting used in the ODT to PDF conversion process. This could lead to a complete compromise of the web server.
- Takeover of the server.
- Affects Dolibarr ERP/CRM.
- Requires admin access.
Attack Path
How an attacker could exploit the issue
An authenticated administrator could exploit this vulnerability by manipulating the ODT to PDF conversion setting to inject operating system commands. This could allow them to execute arbitrary code on the server as the web server user, enabling further compromise of the system or data exfiltration.
- Requires admin access.
- Exploit via ODT template settings.
- Unsanitized command injection.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability allows authenticated administrators to execute arbitrary OS commands by injecting them into a shell command that converts ODT to PDF. Attackers prefer vulnerabilities that are easier to exploit and don't require prior access or elevated privileges. While this flaw is critical, the authenticated administrator prerequisite limits its immediate appeal for widespread automated exploitation campaigns.
- Requires administrator access.
- No public exploit code observed.
- Fix is available.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize patching Dolibarr ERP/CRM to version 23.0.0 to fix the critical remote code execution vulnerability. If immediate patching is not feasible, isolate affected systems to prevent exploitation until a fix can be applied.
- Patch Dolibarr to 23.0.0.
- Isolate vulnerable Dolibarr instances.
- Monitor logs for suspicious ODT template generation.
