~ / search / GHSA-jh69-6vv2-wfp5

GHSA-jh69-6vv2-wfp5

Dolibarr ERP and CRM contain XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-9016

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr <= 11.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.

References

External links from the advisory. They lead to third-party sites.