Lucene search

K
osvGoogleOSV:CVE-2020-13239
HistoryMay 20, 2020 - 3:15 p.m.

CVE-2020-13239

2020-05-2015:15:11
Google
osv.dev
5

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS.

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%