Mayan Edms
Monthly
Open redirect vulnerability in Mayan EDMS allows remote attackers to redirect users to arbitrary websites by crafting malicious URLs targeting the /authentication/ endpoint, affecting versions up to 4.10.1. A publicly available proof-of-concept exploit exists, though no active exploitation has been confirmed. EPSS indicates a low probability of exploitation at 0.18%.
Cross-site scripting in Mayan EDMS 4.10.1 and earlier allows remote unauthenticated attackers to inject scripts via the /authentication/ endpoint. Exploiting this vulnerability could enable session hijacking or phishing if a victim visits a malicious link. Public exploit code is available, but no active exploitation is confirmed.
An issue was discovered in Mayan EDMS before 3.0.3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
An issue was discovered in Mayan EDMS before 3.0.2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
An issue was discovered in Mayan EDMS before 3.0.2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.
Open redirect vulnerability in Mayan EDMS allows remote attackers to redirect users to arbitrary websites by crafting malicious URLs targeting the /authentication/ endpoint, affecting versions up to 4.10.1. A publicly available proof-of-concept exploit exists, though no active exploitation has been confirmed. EPSS indicates a low probability of exploitation at 0.18%.
Cross-site scripting in Mayan EDMS 4.10.1 and earlier allows remote unauthenticated attackers to inject scripts via the /authentication/ endpoint. Exploiting this vulnerability could enable session hijacking or phishing if a victim visits a malicious link. Public exploit code is available, but no active exploitation is confirmed.
An issue was discovered in Mayan EDMS before 3.0.3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
An issue was discovered in Mayan EDMS before 3.0.2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
An issue was discovered in Mayan EDMS before 3.0.2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.