CVE-2019-16197 in Dolibarr

Sumário

de VulDB • 29/05/2026

In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 09/09/2019
• Moderação: aceite
• Entrada: VDB-141853
• CPE: pronto
• CWE: CWE-79 (confirmado)
• Exploração: Descarregar
• CVSS: 6.1 (NVD)
• EPSS: 0.02990
• KEV: não
• Atividades: muito baixo
• Sector: Chemical, Energy, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-16197
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-16197
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-16197/