Moderate severity vulnerability that affects mayan-edms

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-16407 · ADVISORY
• GitHub Advisory GHSA-5h6m-9mvx-m6c5 · ADVISORY
• pypa/advisory-database · WEB
• gitlab.com/mayan-edms/mayan-edms · PACKAGE
• gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst · WEB
• gitlab.com/mayan-edms/mayan-edms/commit/076468a9225e4630a463c0bbceb8e5b805fe380c · WEB
• gitlab.com/mayan-edms/mayan-edms/issues/496 · WEB

mayan-edms のその他の脆弱性

• CVE-2025-14692中 6.1A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulatio…
• CVE-2025-14691中 6.1A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manip…
• CVE-2022-47419中 5.4An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
• CVE-2018-16406中 6.1An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label.
• CVE-2018-16405中 6.1An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.