CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2022-47419
Medium (5.4) in mayan-edms mayan edms. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in mayan-edms 4.3.6.
An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mayan-edms:mayan_edms
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5m6v-2xgf-qhrw | PyPI | mayan-edms | <4.3.6 | 4.3.6 |
| PYSEC-2023-276 | PyPI | mayan-edms | <4.3.6 | 4.3.6 |
References
- https://www.mayan-edms.com/news/2023/02/version-4.3.6/
- https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/
- https://www.mayan-edms.com/news/2023/02/version-4.3.6/
- https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/