Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-38888
HistorySep 20, 2023 - 1:15 a.m.

Cross site scripting

2023-09-2001:15:00
PRIOn knowledge base
www.prio-n.com
5
cross site scripting
dolibarr erp crm
rest api
vulnerability
sensitive information
arbitrary code
nvd

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.

CPENameOperatorVersion
dolibarr_erp\\/crmle17.0.1

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

Related for PRION:CVE-2023-38888