CVE-2024-34051

描述

A Reflected Cross-site scripting (XSS) vulnerability located in htdocs/compta/paiement/card.php of Dolibarr before 19.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the facid parameter.

如何修補 CVE-2024-34051

要修補 CVE-2024-34051,請將受影響套件升級到下列已修補版本。

• Packagist/dolibarr/dolibarr—升級至 19.0.2 或更新版本

CVE-2024-34051 正在被利用嗎?

中等 — EPSS 為 12.0%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 19.0.2

參考連結(4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2024-34051
• PATCHgithub.com/Dolibarr/dolibarr
• WEBblog.smarttecs.com/posts/2024-004-cve-2024-34051
• WEBgithub.com/Dolibarr/dolibarr/commit/3a3ccc253b8eceddee84f158b2c262a4033b9402