mayan-edms Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-16405 · ADVISORY
• GitHub Advisory GHSA-fpcv-j2q9-vqhw · ADVISORY
• pypa/advisory-database · WEB
• pypa/advisory-database · WEB
• gitlab.com/mayan-edms/mayan-edms · PACKAGE
• gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst · WEB
• gitlab.com/mayan-edms/mayan-edms/commit/9ebe80595afe4fdd1e2c74358d6a9421f4ce130e · WEB
• gitlab.com/mayan-edms/mayan-edms/issues/494 · WEB

mayan-edms のその他の脆弱性

• CVE-2025-14692中 6.1A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulatio…
• CVE-2025-14691中 6.1A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manip…
• CVE-2022-47419中 5.4An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
• CVE-2018-16407中 6.1An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.
• CVE-2018-16406中 6.1An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label.