medium6.1
CVE-2018-16405
An issue was discovered in Mayan EDMS before 3.0.2.
Impact
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mayan-Edms | Mayan Edms | before 3.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst
- https://gitlab.com/mayan-edms/mayan-edms/commit/9ebe80595afe4fdd1e2c74358d6a9421f4ce130e
- https://gitlab.com/mayan-edms/mayan-edms/issues/494
- https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst
- https://gitlab.com/mayan-edms/mayan-edms/commit/9ebe80595afe4fdd1e2c74358d6a9421f4ce130e
- https://gitlab.com/mayan-edms/mayan-edms/issues/494