CVE-2019-19210

Fixed upstream EPSS <1%

Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.

Published 2020-03-16 · CVE record · OSV

Products: dolibarr

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	10.0.3

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix