Lucene search

CVE-2020-29456

🗓️ 02 Dec 2020 08:10:15Reported by [email protected]Type

Multiple XSS vulnerabilities in Papermerge before 1.5.2 allow remote injection of web script or HTML via rename, tag, upload, or create folder functio

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
OSV	PYSEC-2020-74	2 Dec 202008:15	–	osv
OSV	CVE-2020-29456	2 Dec 202008:15	–	osv
OSV	GHSA-9W49-M7XH-5R39 Cross-site scripting in papermerge	20 Apr 202116:37	–	osv
Prion	Cross site scripting	2 Dec 202008:15	–	prion
Huntr	Cross-site Scripting (XSS) - Generic in ciur/papermerge	6 Feb 202100:00	–	huntr
CVE	CVE-2020-29456	2 Dec 202008:15	–	cve
Github Security Blog	Cross-site scripting in papermerge	20 Apr 202116:37	–	github
RedhatCVE	CVE-2020-29456	22 May 202515:28	–	redhatcve
Cvelist	CVE-2020-29456	2 Dec 202007:50	–	cvelist

Nvd

Node

papermerge papermergeRange<1.5.2

Source	Link
github	www.github.com/ciur/papermerge/releases/tag/v1.5.2
github	www.github.com/ciur/papermerge/issues/228
papermerge	www.papermerge.com/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Dec 2020 08:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS24.3

CVSS36.1

EPSS0.00467

CWE-79