Threat Investigation
Request a demo

CVE-2021-42220

Medium

Description

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

SeverityMedium
CVSS5.4
Exploit probability—
ProductDolibarr
PublishedDec 15, 2021
First seenDec 15, 2021

How to fix

Update
  • dolibarr dolibarr14.0.3 or later
  • dolibarr/dolibarr14.0.3 or later

Affected products

ProductAffected versionsFixed in
dolibarr dolibarrv < 14.0.314.0.3
dolibarr/dolibarrPackagistv < 14.0.314.0.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.