PyPI/mayan-edms CVE-2025-14691: medium 6.1, EPSS 0.46%
A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be p
Action: Upgrade mayan-edms to 4.10.2 or later.
pip install mayan-edms==4.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.2 | - |
Fixed versions
| 4.10.2 |
Sources
- osv: PYSEC-2025-134
- https://docs.mayan-edms.com/chapters/releases/4.10.2.html
- https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security
- https://vuldb.com/?id.336409
- https://vuldb.com/?submit.711713
- https://vuldb.com/?ctiid.336409
- https://github.com/ionutluca888/Mayan-EDMS-XSS-POC
- https://github.com/advisories/GHSA-774q-r975-vqwp
CVE-2025-14691 · published · modified · JSON