CVE-2014-3840
1 advisory.
PyPI/mayan-edms CVE-2014-3840: medium
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wpvx-26f7-65q3
- https://nvd.nist.gov/vuln/detail/CVE-2014-3840
- https://github.com/mayan-edms/mayan-edms/issues/3
- https://github.com/mayan-edms/mayan-edms/commit/398c480c10416d76e7c1dcb607e726e8fc988e72
- https://github.com/mayan-edms/Mayan-EDMS
- https://github.com/pypa/advisory-database/tree/main/vulns/mayan-edms/PYSEC-2014-110.yaml
- http://research.openflare.org/advisories/OF-2014-09/mayan-edbs-storedxss.txt
- http://research.openflare.org/poc/maya-edms/maya-edms_multiple_xss.avi
- http://seclists.org/oss-sec/2014/q2/349
- http://seclists.org/oss-sec/2014/q2/352
- http://www.exploit-db.com/exploits/33493
CVE-2014-3840 · published · modified · JSON