~ / search / GHSA-h3vg-4x76-v28w

GHSA-h3vg-4x76-v28w

Dolibarr ERP and CRM contain XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-14241

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr < 6.0.1 6.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site scripting (XSS) vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php.

References

External links from the advisory. They lead to third-party sites.