Lucene search
Veracode Vulnerability DatabaseVERACODE:25047HistoryApr 17, 2020 - 6:12 a.m.
Cross-site Scripting (XSS)
2020-04-1706:12:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
25.0%
dolibarr is vulnerable to cross-site scripting (XSS). With the USER_LOGIN_FAILED setting,an attacker can inject arbitrary script in admin tools --> audit page, possibly stealing admin account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 10.0.6 | |
| dolibarr/dolibarr | le | 10.0.6 |
Related
nvd
nvd
CVE-2020-11823
2020-04-16 19:15:27
ubuntucve
ubuntucve
CVE-2020-11823
2020-04-16 00:00:00
cve
cve
CVE-2020-11823
2020-04-16 19:15:27
osv
osv
Dolibarr stored Cross-site Scripting vulnerability
2022-05-24 17:15:34
CVE-2020-11823
2020-04-16 19:15:27
cvelist
cvelist
CVE-2020-11823
2020-04-16 18:36:24
prion
prion
Cross site scripting
2020-04-16 19:15:00
github
github
Dolibarr stored Cross-site Scripting vulnerability
2022-05-24 17:15:34