Moderate severity vulnerability that affects mayan-edms

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-16406 · ADVISORY
• GitHub Advisory GHSA-5r76-cjf4-c9qx · ADVISORY
• pypa/advisory-database · WEB
• gitlab.com/mayan-edms/mayan-edms · PACKAGE
• gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst · WEB
• gitlab.com/mayan-edms/mayan-edms/commit/48dfc06e49c7f773749e063f8cc69c95509d1c32 · WEB
• gitlab.com/mayan-edms/mayan-edms/issues/495 · WEB

mayan-edms의 다른 취약점

• CVE-2025-14692보통 6.1A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulatio…
• CVE-2025-14691보통 6.1A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manip…
• CVE-2022-47419보통 5.4An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
• CVE-2018-16407보통 6.1An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.
• CVE-2018-16405보통 6.1An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.