Lucene search
Veracode Vulnerability DatabaseVERACODE:25732HistoryJun 22, 2020 - 5:27 a.m.
Cross-site Scripting (XSS)
2020-06-2205:27:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
45.5%
dolibarr is vulnerable to cross-site scripting (XSS). It is possible because it does not escape the user-provided transkey value, allowing an attacker can inject malicious script and get executed the script when the page is visited.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | le | 10.0.7 | |
| dolibarr/dolibarr | le | 11.0.4 | |
| dolibarr/dolibarr | le | 10.0.7 | |
| dolibarr/dolibarr | le | 11.0.4 |
Related
osv
osv
CVE-2020-14475
2020-06-19 17:15:14
Dolibarr reflected cross-site scripting (XSS) vulnerability
2022-05-24 17:21:18
github
github
Dolibarr reflected cross-site scripting (XSS) vulnerability
2022-05-24 17:21:18
prion
prion
Cross site scripting
2020-06-19 17:15:00
cve
cve
CVE-2020-14475
2020-06-19 17:15:14
cvelist
cvelist
CVE-2020-14475
2020-06-19 16:20:00
ubuntucve
ubuntucve
CVE-2020-14475
2020-06-19 00:00:00
nvd
nvd
CVE-2020-14475
2020-06-19 17:15:14