CVE-2022-47418 LogicalDOC Document Version Comment Stored XSS

2023-02-0722:04:06

CWE-79

rapid7

www.cve.org

cve-2022-47418

logicaldoc

document version

stored xss

0.001 Low

EPSS

Percentile

20.3%

JSON

LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or “Type II”) cross-site scripting (XSS) condition in the document version comments.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "LogicalDOC Enterprise",
    "vendor": "LogicalDOC",
    "versions": [
      {
        "lessThanOrEqual": "8.8.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "LogicalDOC Community Edition",
    "vendor": "LogicalDOC",
    "versions": [
      {
        "lessThanOrEqual": "8.7.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]