Lucene search
GoogleOSV:GHSA-FVF9-2HJP-W936HistoryMay 24, 2022 - 5:18 p.m.
Dolibarr Stored Cross-site Scripting via file upload
2022-05-2417:18:12
Google
osv.dev
5
The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | eq | 11.0.4 |
Related
prion
prion
Cross site scripting
2020-05-20 15:15:00
nvd
nvd
CVE-2020-13239
2020-05-20 15:15:11
veracode
veracode
Cross-Site Scripting (XSS)
2020-05-21 04:57:38
github
github
Dolibarr Stored Cross-site Scripting via file upload
2022-05-24 17:18:12
cve
cve
CVE-2020-13239
2020-05-20 15:15:11
ubuntucve
ubuntucve
CVE-2020-13239
2020-05-20 00:00:00
osv
osv
CVE-2020-13239
2020-05-20 15:15:11
cvelist
cvelist
CVE-2020-13239
2020-05-20 14:57:38