medium5.4
CVE-2019-17578
Dolibarr Cross-site Scripting vulnerability
Impact
An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the `admin/mails.php?action=edit` URI via the "Sender email for automatic emails (default value in php.ini: Undefined)" field.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | dolibarr/dolibarr | = 10.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dolibarr | Dolibarr Erp\/Crm | Version 10.0.2 |