CVE-2023-5842: Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
Published Oct 30, 2023
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5.
Affected Software
2 affected componentsFixes available
composer/dolibarr/dolibarr<16.0.5
16.0.5
dolibarr Dolibarr Erp\/crm<16.0.5
Remediation
Event History
Oct 30, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
03:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-5842?
The severity of CVE-2023-5842 is medium with a CVSS score of 4.8.
2
How does CVE-2023-5842 affect dolibarr/dolibarr?
CVE-2023-5842 affects dolibarr/dolibarr versions prior to 16.0.5.
3
What is the CWE ID for CVE-2023-5842?
The CWE ID for CVE-2023-5842 is CWE-79.
4
Where can I find more information about CVE-2023-5842?
You can find more information about CVE-2023-5842 in the following references: [Reference 1](https://huntr.com/bounties/aed81114-5952-46f5-ae3a-e66518e98ba3), [Reference 2](https://github.com/dolibarr/dolibarr/commit/f569048eb2bd823525bce4ef52316e7a83e3345c), [Reference 3](https://nvd.nist.gov/vuln/detail/CVE-2023-5842).
5
How can I fix CVE-2023-5842 in dolibarr/dolibarr?
To fix CVE-2023-5842 in dolibarr/dolibarr, upgrade to version 16.0.5 or later.