Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-5323 BIT-dolibarr-2023-5323EUVD-2023-2627GHSA-39m3-cj8c-886r

Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr

Published Oct 1, 2023 · Updated Sep 20, 2024 · Assigned by @huntrdev

Description

Cross-site Scripting (XSS) - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.

Affected products

VendorProductAffectedFixed
dolibarr dolibarr/dolibarr unspecified – < 18.0 18.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS dolibarr No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist dolibarr/dolibarr < 18.0.0 18.0.0 GHSA-39m3-cj8c-886r

References