Dolibarr reflected cross-site scripting (XSS) vulnerability

MÉDIO 6.1CVE-2020-14475 · BIT-dolibarr-2020-14475 · GHSA-m396-2x3h-v3v4 · Published 19/06/2020 · updated 17/06/2026

Em resumo

CVE-2020-14475 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta dolibarr/dolibarr, dolibarr erp/crm (dolibarr).
Chance de exploração nos próximos 30 dias (EPSS): 0.81%, maior que 56.9% das vulnerabilidades.
Correção: atualize para 11.0.5 ou posterior.

Package	Affected versions	Patched versions
dolibarr/dolibarr Packagist	`< 11.0.5`	`11.0.5`
dolibarr erp/crm dolibarr	`= 11.0.3`	No fix yet

Description

A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.4 and below allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).

NVD description

A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).

References

nvd.nist.gov/vuln/detail/CVE-2020-14475 · ADVISORY
Dolibarr/dolibarr commit 22ca5e0 · WEB
Dolibarr/dolibarr · PACKAGE

Mais vulnerabilidades de dolibarr/dolibarr

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dolibarr/dolibarr

Packagist

< 11.0.5

11.0.5

dolibarr erp/crm

dolibarr

= 11.0.3

No fix yet

Description

NVD description

A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).

Mais vulnerabilidades de dolibarr/dolibarr

Ver tudo →