GHSA-fc6h-769x-gff5MediumCVSS 6.1
Dolibarr ERP and CRM contain XSS Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the user-management feature.
🎯 Affected products1
- composer/dolibarr/dolibarr:<= 13.0.2
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2021-33618
- https://github.com/Dolibarr/dolibarr/releases
- https://trovent.github.io/security-advisories/TRSA-2105-02/TRSA-2105-02.txt
- https://trovent.io/security-advisory-2105-02
- http://seclists.org/fulldisclosure/2021/Nov/38
- https://github.com/advisories/GHSA-fc6h-769x-gff5