CVE-2020-11823
No fix known EPSS <1%
In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit page. This may lead to stealing of the admin account.
Products: dolibarr_erp/crm
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| Packagist | dolibarr/dolibarr |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 16.04 LTS | dolibarr | no fix |