Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-62wf-h26v-5m57

Опубликовано: 20 сент. 2023
Источник: github
Github: Прошло ревью
CVSS3: 9.6

Описание

Cross Site Scripting vulnerability in Dolibarr ERP CRM

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.

Пакеты

Наименование

dolibarr/dolibarr

composer
Затронутые версииВерсия исправления

< 17.0.1

17.0.1

EPSS

Процентиль: 89%
0.05006
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 9.6
ubuntu
больше 2 лет назад

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.

CVSS3: 9.6
nvd
больше 2 лет назад

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.

CVSS3: 9.6
debian
больше 2 лет назад

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and be ...

EPSS

Процентиль: 89%
0.05006
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79