Lucene search
PRIOn knowledge basePRION:CVE-2022-47412HistoryFeb 07, 2023 - 8:15 p.m.
Cross site scripting
2023-02-0720:15:00
PRIOn knowledge base
www.prio-n.com
2
malicious document
attacker
nvd
xss
vulnerability
0.001 Low
EPSS
Percentile
23.4%
Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or “Type II”) cross-site scripting (XSS) condition.
| CPE | Name | Operator | Version |
|---|---|---|---|
| workspace | le | 12.1.0.1760 |
Related
cve
cve
CVE-2022-47412
2023-02-07 20:15:08
nvd
nvd
CVE-2022-47412
2023-02-07 20:15:08
cvelist
cvelist
CVE-2022-47412 ONLYOFFICE Workspace Search Stored XSS
2023-02-07 19:16:17
osv
osv
thn
thn
Unpatched Security Flaws Disclosed in Multiple Document Management Systems
2023-02-08 15:15:00
rapid7blog
rapid7blog
Multiple DMS XSS (CVE-2022-47412 through CVE-20222-47419)
2023-02-07 14:05:00