GHSA-m44p-cfwj-wwr6
Dashboard / Vulnerabilities / GHSA-m44p-cfwj-wwr6
Summary: Dolibarr Cross-site Scripting in a User Note section
Details: Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin.
References: https://nvd.nist.gov/vuln/detail/CVE-2019-16686, https://github.com/Dolibarr/dolibarr, http://verneet.com/cve-2019-16686
Affected packages
Package
Name: dolibarr/dolibarr
Purl: pkg:composer/dolibarr/dolibarr
Affected ranges
Type: N/A
Events:
Introduced- None
Fixed -None
Affected versions
9.0.5
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
