Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.
XSS
Mayan Edms
NVD
Exploit-DB
GitHub
CVSS 2.0
3.5
EPSS
1.1%
The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. Public exploit code available.
Information Disclosure
Hub
NVD
GitHub
CVSS 2.0
3.6
EPSS
0.1%