En resumen
- CVE-2020-14475 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a dolibarr/dolibarr, dolibarr erp/crm (dolibarr).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.81%, mayor que el 56.9% de las vulnerabilidades.
- Solución: actualizar a 11.0.5 o posterior.
Description
A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.4 and below allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).
NVD description
A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).
Más vulnerabilidades de dolibarr/dolibarr
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free