{"action":"Upgrade mayan-edms to 4.3.6 or later.","affected":[{"fixed":"4.3.6","introduced":"0"}],"component":"mayan-edms","cve_ids":["CVE-2022-47419"],"ecosystem":"PyPI","epss":0.00536,"exploited":false,"fixed_versions":["4.3.6"],"ghsa_id":"GHSA-5m6v-2xgf-qhrw","id":"tcs_01M5KGK8Y02C0X9VREK3MD7S4N","modified_at":"2024-11-25T22:42:05.053955Z","published_at":"2023-02-07T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-276","https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/","https://www.mayan-edms.com/news/2023/02/version-4.3.6/"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2023-276","url":"https://osv.dev/vulnerability/PYSEC-2023-276"}],"summary":"An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system."}