~ / search / GHSA-m396-2x3h-v3v4

GHSA-m396-2x3h-v3v4

Dolibarr reflected cross-site scripting (XSS) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-14475

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr < 11.0.5 11.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.4 and below allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).

References

External links from the advisory. They lead to third-party sites.