CVE-2018-19993

Fixed upstream EPSS 1%

A reflected cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php.

Published 2019-01-03 · CVE record · OSV

Products: dolibarr_erp/crm

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	8.0.4

Distro releases

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix