CVE-2022-47419
2 advisories.
PyPI/mayan-edms CVE-2022-47419: medium 5.4
Mayan EDMS DMS XSS vulnerability
Action: Upgrade mayan-edms to 4.3.6 or later.
pip install mayan-edms==4.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.6 | - |
Fixed versions
| 4.3.6 |
Sources
- osv: GHSA-5m6v-2xgf-qhrw
- https://nvd.nist.gov/vuln/detail/CVE-2022-47419
- https://github.com/mayan-edms/Mayan-EDMS
- https://github.com/pypa/advisory-database/tree/main/vulns/mayan-edms/PYSEC-2023-276.yaml
- https://www.mayan-edms.com/news/2023/02/version-4.3.6
- https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419
CVE-2022-47419 · published · modified · JSON
PyPI/mayan-edms CVE-2022-47419: medium 5.4
An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
Action: Upgrade mayan-edms to 4.3.6 or later.
pip install mayan-edms==4.3.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.6 | - |
Fixed versions
| 4.3.6 |
Sources
- osv: PYSEC-2023-276
- https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
- https://www.mayan-edms.com/news/2023/02/version-4.3.6/
CVE-2022-47419 · published · modified · JSON