CVE-2023-5842 — Cross-site Scripting in Dolibarr

CWE-79 — Cross-site Scripting5 documents5 sources
Severity
4.8MEDIUMNVD
EPSS
0.1%
top 70.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Dolibarr DolibarrDolibarr ERP CRMDolibarr
Timeline
PublishedOct 30
Latest updateJun 11

Description

Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitability: 1.7 | Impact: 2.7

Affected Packages3 packages

▶Packagistdolibarr/dolibarr< 16.0.5
▶CVEListV5dolibarr/dolibarr_dolibarrunspecified — 16.0.5

Patches

Patch: github.com ↗Patch: huntr.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
OSV
Cross-site Scripting (XSS) in dolibarr/dolibarr↗2023-10-30
▶
GHSA
Cross-site Scripting (XSS) in dolibarr/dolibarr↗2023-10-30
▶
CVEList
Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr↗2023-10-30
▶

📋Vendor Advisories

1
Chrome
Stable Channel Update for Desktop: CVE-2024-5842↗2024-06-11
▶
CVE-2023-5842 — Cross-site Scripting in Dolibarr | cvebase