UpHeron
All vulnerabilities

Servers and applications

CVE-2024-23817

HTML injection vulnerability in Dolibarr Application Home Page

Severity
Medium 6.1
Published
25 Jan 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Also known as
GHSA-7947-48q7-cp5m
Sources
NVD, Project advisories (GitHub)

Description

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendered content in the application's response. Specifically, I was able to successfully inject a new…

Affected software

SoftwareAffected versions
Dolibarr ERP CRMServers and applications · cpe:a:dolibarr:dolibarr_erp\/crm
  • Version 18.0.4
Dolibarr ERP CRMServers and applications · github:dolibarr/dolibarr
  • Version 18.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-23817
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-23817
  • GitHub Advisory Database https://github.com/advisories/GHSA-7947-48q7-cp5m
  • github.com https://github.com/Dolibarr/dolibarr/security/advisories/GHSA-7947-48q7-cp5m