Em resumo
- CVE-2017-14239 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta dolibarr/dolibarr, dolibarr (dolibarr).
- Chance de exploração nos próximos 30 dias (EPSS): 0.72%, maior que 54.0% das vulnerabilidades.
- Correção: atualize para 6.0.1 ou posterior.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php.
NVD description
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php.
Mais vulnerabilidades de dolibarr/dolibarr
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free