CVE-2023-5323 — Cross-site Scripting in Dolibarr

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 56.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Dolibarr DolibarrDolibarr ERP CRMDolibarr
Timeline
PublishedOct 1

Description

Cross-site Scripting (XSS) - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages3 packages

▶Packagistdolibarr/dolibarr< 18.0.0
▶CVEListV5dolibarr/dolibarr_dolibarrunspecified — 18.0

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
Dolibarr Cross-site Scripting vulnerability↗2023-10-01
▶
OSV
CVE-2023-5323: Cross-site Scripting (XSS) - Generic in GitHub repository dolibarr/dolibarr prior to 18↗2023-10-01
▶
CVEList
Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr↗2023-10-01
▶
OSV
Dolibarr Cross-site Scripting vulnerability↗2023-10-01
▶
CVE-2023-5323 — Cross-site Scripting in Dolibarr | cvebase