[Dolibarr] Dolibarr has Remote Code Execution Vulnerability (Bypass)

Produit : Dolibarr

Type : Security Advisory

Criticité : medium

Date source : 19/07/2025 17:22

Résumé :
# Summary

The Dolibarr backend provides the function of adding Menu, and supports setting permissions for the added Menu:


This is the trigger point of the vulnerability. The submitted permission can be php code, and it will be executed when viewing the created Menu:

– htdocs/admin/menus/edit.php


As you can see, in edit.php, if the created menu is set to `$menu->perms`, the `dol_eval()` method will be called. Following the `dol_eval()` method, we can see that it will filter the dangerous php functions in `$menu->perms` through the blacklist set in `$forbiddenphpfunctions`:


However, the black

Action recommandée :
Vérifier la version installée et appliquer le correctif si le produit est concerné.

Source : Voir l’annonce officielle