Lucene search
Veracode Vulnerability DatabaseVERACODE:13711HistoryApr 30, 2019 - 8:08 a.m.
Cross-Site Scripting (XSS)
2019-04-3008:08:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
24.0%
Dolibarr/dolibarr is vulnerable to cross-site scripting (XSS). A lack of validation of the mime types during file uploads allows a remote attacker to upload a malicious file containing Javascript code with type/html as the mime type. This causes the contents of the file to be rendered as HTML when a user views the image in the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 9.0.2 |
Related
nvd
nvd
CVE-2019-11199
2019-07-29 16:15:11
prion
prion
Cross site scripting
2019-07-29 16:15:00
osv
osv
CVE-2019-11199
2019-07-29 16:15:11
cve
cve
CVE-2019-11199
2019-07-29 16:15:11
cvelist
cvelist
CVE-2019-11199
2019-07-29 15:36:51
ubuntucve
ubuntucve
CVE-2019-11199
2019-07-29 00:00:00
openvas
openvas
Dolibarr < 9.0.3 Multiple Vulnerabilities
2019-07-31 00:00:00