Description

Dolibarr version 6.0.2 contains a Cross Site Scripting (XSS) vulnerability in Product details that can result in execution of javascript code.

Remediation

References

CVE-2017-1000509

Related Vulnerabilities

Python Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2016-5699)

Drupal Core 8.x.x Directory Traversal (8.0.0 - 8.8.12)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-31778)

Oracle Database Server CVE-2013-3751 Vulnerability (CVE-2013-3751)

WordPress Plugin Download Zip Attachments Arbitrary File Download (1.0.0)

Severity

Medium

Classification

CVE-2017-1000509 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities