Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-42220

Опубликовано: 15 дек. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 3.5
CVSS3: 5.4

Описание

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

РелизСтатусПримечание
esm-apps/xenial

needed

trusty

ignored

end of standard support
upstream

needs-triage

xenial

ignored

end of standard support

Показывать по

EPSS

Процентиль: 50%
0.00271
Низкий

3.5 Low

CVSS2

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
nvd
около 4 лет назад

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

CVSS3: 5.4
debian
около 4 лет назад

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 1 ...

CVSS3: 5.4
github
около 4 лет назад

Dolibarr Cross Site Scripting (XSS) vulnerability

EPSS

Процентиль: 50%
0.00271
Низкий

3.5 Low

CVSS2

5.4 Medium

CVSS3