Lucene search

K
osvGoogleOSV:CVE-2021-33618
HistoryNov 10, 2021 - 11:15 p.m.

CVE-2021-33618

2021-11-1023:15:07
Google
osv.dev
3
cve-2021-33618
xss
dolibarr erp
crm
user-management
software

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

50.1%

Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the user-management feature.

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

50.1%