En resumen
- CVE-2019-16197 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a dolibarr/dolibarr, dolibarr erp/crm (dolibarr).
- Probabilidad de explotación en los próximos 30 días (EPSS): 3.0%, mayor que el 87.3% de las vulnerabilidades.
- Solución: actualizar a 10.0.2 o posterior.
Description
In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.
NVD description
In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.
Más vulnerabilidades de dolibarr/dolibarr
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free