Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-97fp-5m87-r9mf

Опубликовано: 24 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

Dolibarr Cross Site Scripting (XSS)

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.

Пакеты

Наименование

dolibarr/dolibarr

composer
Затронутые версииВерсия исправления

= 6.0.4

Отсутствует

EPSS

Процентиль: 50%
0.00267
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 6 лет назад

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.

CVSS3: 6.1
nvd
больше 6 лет назад

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.

CVSS3: 6.1
debian
больше 6 лет назад

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact ...

EPSS

Процентиль: 50%
0.00267
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79