Skip to content
OpenAdvisories
Medium · 6.1 CVE-2018-16405 EUVD-2018-0091GHSA-fpcv-j2q9-vqhwPYSEC-2018-106PYSEC-2018-16

mayan-edms Cross-site Scripting vulnerability

Published Sep 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Package: mayan-edms Package: mayan-edms-ng Ecosystem: PyPI

Description

An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI mayan-edms < 3.0.2 3.0.2 GHSA-fpcv-j2q9-vqhw
PyPI mayan-edms-ng < 3.0.2 3.0.2 GHSA-fpcv-j2q9-vqhw

References