{"action":"Upgrade mayan-edms to 4.3.6 or later.","affected":[{"fixed":"4.3.6","introduced":"0"}],"component":"mayan-edms","cve_ids":["CVE-2022-47419"],"ecosystem":"PyPI","epss":0.00536,"exploited":false,"fixed_versions":["4.3.6"],"ghsa_id":"GHSA-5m6v-2xgf-qhrw","id":"tcs_01M5KF1BJXV56NKQY8WP3WGQ6E","modified_at":"2025-03-25T15:52:16.162471Z","published_at":"2023-02-08T00:30:34Z","references":["https://osv.dev/vulnerability/GHSA-5m6v-2xgf-qhrw","https://nvd.nist.gov/vuln/detail/CVE-2022-47419","https://github.com/mayan-edms/Mayan-EDMS","https://github.com/pypa/advisory-database/tree/main/vulns/mayan-edms/PYSEC-2023-276.yaml","https://www.mayan-edms.com/news/2023/02/version-4.3.6","https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-5m6v-2xgf-qhrw","url":"https://osv.dev/vulnerability/GHSA-5m6v-2xgf-qhrw"}],"summary":"Mayan EDMS DMS XSS vulnerability"}