Lucene search
Rapid7CVELIST:CVE-2022-47415HistoryFeb 07, 2023 - 9:33 p.m.
CVE-2022-47415 LogicalDOC Messaging Stored XSS
2023-02-0721:33:56
CWE-79
rapid7
www.cve.org
4
logicaldoc
xss
in-app
messaging
EPSS
0.001
Percentile
21.8%
LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or “Type II”) cross-site scripting (XSS) condition in the in-app messaging system (both subject and message bodies).
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "LogicalDOC Enterprise",
"vendor": "LogicalDOC",
"versions": [
{
"lessThanOrEqual": "8.8.2",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "LogicalDOC Community Edition",
"vendor": "LogicalDOC",
"versions": [
{
"lessThanOrEqual": "8.7.3",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
]Related
nvd
nvd
CVE-2022-47415
2023-02-07 22:15:10
cve
cve
CVE-2022-47415
2023-02-07 22:15:10
prion
prion
Cross site scripting
2023-02-07 22:15:00
thn
thn
Unpatched Security Flaws Disclosed in Multiple Document Management Systems
2023-02-08 15:15:00
rapid7blog
rapid7blog
Multiple DMS XSS (CVE-2022-47412 through CVE-20222-47419)
2023-02-07 14:05:00