CVE-2022-47417 LogicalDOC Document File Name Stored XSS

2023-02-0721:59:24

CWE-79

rapid7

www.cve.org

logicaldoc

stored xss

document file name

0.001 Low

EPSS

Percentile

20.1%

JSON

LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or “Type II”) cross-site scripting (XSS) condition in the document file name.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "LogicalDOC Enterprise",
    "vendor": "LogicalDOC",
    "versions": [
      {
        "lessThanOrEqual": "8.8.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LogicalDOC Community Edition",
    "vendor": "LogicalDOC",
    "versions": [
      {
        "lessThanOrEqual": "8.7.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]