Mayan EDMS DMS XSS vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-47419 · ADVISORY
• mayan-edms/Mayan-EDMS · PACKAGE
• pypa/advisory-database · WEB
• mayan-edms.com/news/2023/02/version-4.3.6 · WEB
• rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419 · WEB
• mayan-edms.com/news/2023/02/version-4.3.6
• rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419 · Exploit

Weitere Schwachstellen in mayan-edms

• CVE-2025-14692MITTEL 6.1A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulatio…
• CVE-2025-14691MITTEL 6.1A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manip…
• CVE-2018-16407MITTEL 6.1An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.
• CVE-2018-16406MITTEL 6.1An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label.
• CVE-2018-16405MITTEL 6.1An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.