Lucene search

K
osvGoogleOSV:GHSA-87R3-4GC8-F897
HistoryMay 24, 2022 - 5:11 p.m.

Dolibarr ERP and CRM contain XSS Vulnerability

2022-05-2417:11:33
Google
osv.dev
4
dolibarr
erp
crm
xss
vulnerability
file upload

EPSS

0.001

Percentile

26.4%

Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.

EPSS

0.001

Percentile

26.4%

Related for OSV:GHSA-87R3-4GC8-F897