CVE-2014-3840 Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
LowCVSS 3.5
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (3) Name field in a bootstrap setup, or Title field in a (4) smart link or (5) web form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi mayan-edms(PyPI) | All versions | No fix listed |
| pypi mayan-edms(PyPI) | = 1.0.0 | No fix listed |
| pypi mayan-edms(PyPI) | = 1.0.rc1 | No fix listed |
| pypi mayan-edms(PyPI) | = 1.0.rc2 | No fix listed |
| pypi mayan-edms(PyPI) | = 1.0.rc3 | No fix listed |
| pypi mayan-edms(PyPI) | = 1.1.0 | No fix listed |
| pypi mayan-edms(PyPI) | = 1.1.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.0.0 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.0.0b1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.0.0b2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.0.0rc1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.0.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.0.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1rc1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.1rc2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.2 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi mayan-edms(PyPI) | = 2.2b1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.2b2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.2b3 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.2rc1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.5.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.5.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.6.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.6.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.6.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.6.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.7.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.7.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 2.7.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.0 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.0.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.0.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.0.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.8 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.1.9 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.8 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2.9 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2b1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.2rc1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.12 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.13 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.14 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.15 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.16 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.17 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.18 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.8 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.3.9 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.12 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.13 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.14 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.15 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.16 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.17 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.18 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.19 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.20 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.21 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.22 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.8 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.4.9 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.12 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.8 | No fix listed |
| pypi mayan-edms(PyPI) | = 3.5.9 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.12 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.13 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.14 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.15 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.16 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.17 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.18 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.19 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.20 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.21 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.22 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.23 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.24 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.8 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0.9 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0b1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0b2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0b3 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0b4 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0rc1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0rc2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.0rc3 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.12 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.7 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.8 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1.9 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.10.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.10.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.10.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.10.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.10.6 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.11.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.11.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.11.3 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.11.4 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.11.5 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.12 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.12.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1b1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1b2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1rc1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.1rc2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.1 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.10 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.11 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.12 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.13 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.14 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.15 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.16 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.17 | No fix listed |
| pypi mayan-edms(PyPI) | = 4.2.18 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking
- github.com exploit patch
- github.com product
- github.com
- research.openflare.org exploit
- research.openflare.org
- [oss-security] 20140521 Persistent XSS in Mayan EDMS - document management system mailing-list
- [oss-security] 20140522 Re: Persistent XSS in Mayan EDMS - document management system mailing-list
- 33493 exploit
- 67552 vdb-entry
- github.com vendor-advisory