~ / search / GHSA-2gc5-3h3p-8vpf

GHSA-2gc5-3h3p-8vpf

Dolibarr reflected cross-site scripting (XSS) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-19993

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr < 8.0.4 8.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

A reflected cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php.

References

External links from the advisory. They lead to third-party sites.