CVE-2022-25138

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

CVE-2022-25138

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

Cross site scripting

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

CVE-2022-25138

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

CVE-2022-25138

Axelor Open Suite v5.0 is affected by a stored XSS via the Name parameter. The provided documents describe the vulnerability but do not include detailed exploit steps or a confirmed remediation/fix. No further technical specifics (e.g., affected modules, patches, or workaround) are provided.

CVE-2022-25138

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

CVE-2022-25138

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

Axelor Open Suite 跨站脚本漏洞

Axelor Open Suite is an Axelor Open Suite based on the Axelor Open Platform. It reduces the complexity of business processes and improves responsiveness. A security vulnerability exists in Axelor Open Suite v5.0 that allows attackers to conduct cross-site scripting attacks via the Name parameter...

PT-2022-17095

Name of the Vulnerable Software and Affected Versions Axelor Open Suite version 5.0 Description A stored cross-site scripting XSS issue was found, which can be exploited via the Name parameter. This allows for malicious script execution when the stored data is viewed. Recommendations For Axelor...

CVE-2022-25138: Improper Neutralization of Input During Web Page Generation

Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Name parameter...

WS-2021-0615

In Axelor Open-Suite, versions v4.0.0-rc1 through v6.0.11 are vulnerable to an infinite loop in the MRP component. An authenticated attacker can misconfigure the MRP configuration to consume excessive amounts of resources like CPU or memory, and cause the program to slow down or even cause a DoS...

WS-2019-0612

In Axelor Open-Suite, versions v5.0.0-rc1 through v5.1.11 are vulnerable to XML External Entity Reference XXE, due to XXE processing not disabled when parsing a BPM workflow file. A privileged attacker can upload a specially crafted XML file and trigger DoS and in some cases even RCE...