medium6.1
CVE-2018-16407
An issue was discovered in Mayan EDMS before 3.0.3.
Impact
An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mayan-Edms | Mayan Edms | before 3.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst
- https://gitlab.com/mayan-edms/mayan-edms/commit/076468a9225e4630a463c0bbceb8e5b805fe380c
- https://gitlab.com/mayan-edms/mayan-edms/issues/496
- https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst
- https://gitlab.com/mayan-edms/mayan-edms/commit/076468a9225e4630a463c0bbceb8e5b805fe380c
- https://gitlab.com/mayan-edms/mayan-edms/issues/496