Lucene search

OpenTextCVELIST:CVE-2024-4187

HistoryJul 31, 2024 - 8:28 p.m.

CVE-2024-4187 Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.

2024-07-3120:28:22

CWE-356

OpenText

www.cve.org

opentext filr

24.1.1

24.2

stored xss

unnotified links

CVSS4

2.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/SC:L/VI:N/SI:N/VA:N/SA:N/S:P/AU:N/U:Green/V:D/RE:L

EPSS

Percentile

14.6%

JSON

Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Filr",
    "vendor": "OpenText™",
    "versions": [
      {
        "status": "affected",
        "version": "24.1.1"
      },
      {
        "status": "affected",
        "version": "24.2"
      }
    ]
  }
]

References

portal.microfocus.com/s/article/KM000032291