Dolibarr ERP and CRM contain XSS Vulnerability

MEDIO 5.4CVE-2019-19210 · GHSA-87r3-4gc8-f897 · Published 16/03/2020 · updated 17/06/2026

En resumen

CVE-2019-19210 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a dolibarr/dolibarr, dolibarr (dolibarr).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.93%, mayor que el 60.5% de las vulnerabilidades.
Solución: actualizar a 10.0.3 o posterior.

Package	Affected versions	Patched versions
dolibarr/dolibarr Packagist	`< 10.0.3`	`10.0.3`
dolibarr dolibarr	`≥ 3.0.0, < 10.0.3`	`10.0.3`

Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.

NVD description

Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 10.0.3

10.0.3

≥ 3.0.0, < 10.0.3

10.0.3

Más vulnerabilidades de dolibarr/dolibarr

Ver todo →