Packagist/dolibarr/dolibarr CVE-2018-10095: medium 6.1, EPSS 86.77%

Dolibarr Cross-site scripting (XSS) vulnerability

Action: Upgrade dolibarr/dolibarr to 7.0.2 or later.

composer require dolibarr/dolibarr:7.0.2

Affected

Fixed versions

Sources

• osv: GHSA-p2fm-8rhj-58fr
• https://nvd.nist.gov/vuln/detail/CVE-2018-10095
• https://github.com/Dolibarr/dolibarr/commit/1dc466e1fb687cfe647de4af891720419823ed56
• https://github.com/Dolibarr/dolibarr
• https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog
• https://sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerability
• http://www.openwall.com/lists/oss-security/2018/05/21/3

CVE-2018-10095 · published 2022-05-14T03:20:23Z · modified 2024-04-24T21:01:43.967928Z · JSON