Description
An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mayan EDMS | Mayan EDMS | 4.3.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mayan-edms | < 4.3.6 | 4.3.6 | GHSA-5m6v-2xgf-qhrw |
References
- https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/ third-party-advisory
- https://www.mayan-edms.com/news/2023/02/version-4.3.6/ release-notes vendor-advisory