CVE-2020-7996
1 advisory.
Packagist/dolibarr/dolibarr CVE-2020-7996: medium 6.1
XSS in Dolibarr ERP & CRM
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 10.0.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-v384-jqmq-fc74
- https://nvd.nist.gov/vuln/detail/CVE-2020-7996
- https://github.com/Dolibarr/dolibarr
- https://github.com/tufangungor/tufangungor.github.io/blob/master/_posts/2020-01-19-dolibarr-10.0.6-xss-in-http-header.md
- https://tufangungor.github.io/exploit/2020/01/18/dolibarr-10.0.6-xss-in-http-header.html
CVE-2020-7996 · published · modified · JSON