Cross site scripting

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app messaging system both subject and message bodies...

CVE-2022-47418

LogicalDOC Enterprise and CE are affected by a stored (Type II) cross-site scripting (XSS) in document version comments. Vulnerable component: the document version comments handling in LogicalDOC; root cause described as a stored XSS condition. Impact: confidentiality and integrity may be affecte...

CVE-2022-47418

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document version comments...

CVE-2022-47417 LogicalDOC Document File Name Stored XSS

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document file name...

CVE-2022-47415

Technical details about CVE-2022-47415 are not publicly available in the provided Connected documents. Monitor official advisories and CVE listings for affected products, impact, and available patches.

PT-2023-15297

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise and Community Edition CE affected versions not specified Description The issue is a stored cross-site scripting XSS condition, specifically a "Type II" or persistent XSS, that occurs in the document file name. This means...

CVE-2022-47418: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document version comments...

CVE-2022-47415: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app messaging system both subject and message bodies...

Logicaldoc LogicalDOC 跨站脚本漏洞

LogicalDOC is the U.S. LogicalDOC company a set of document management system developed using Java technology . The system has features such as Lucene full-text search indexing and automatic import. A security vulnerability exists in LogicalDOC Enterprise and Community Edition CE. An attacker cou...

PT-2023-15295

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise and Community Edition CE affected versions not specified Description The issue is related to a stored cross-site scripting XSS condition in the in-app messaging system, affecting both subject and message bodies. This type...

PT-2023-15298

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise and Community Edition CE affected versions not specified Description The issue is a stored cross-site scripting XSS condition in the document version comments, which allows for persistent or "Type II" XSS attacks. This...

LogicalDOC 跨站脚本漏洞

LogicalDOC is the U.S. LogicalDOC company a set of document management system developed using Java technology . The system has features such as Lucene full-text search indexing and automatic import. A security vulnerability exists in LogicalDOC Enterprise and Community Edition CE. An attacker cou...

LogicalDOC 跨站脚本漏洞

LogicalDOC is the U.S. LogicalDOC company a set of document management system developed using Java technology . The system has features such as Lucene full-text search indexing and automatic import. A security vulnerability exists in LogicalDOC Enterprise and Community Edition CE. An attacker cou...

CVE-2022-47417: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document file name...

Vulnerabilities fixed in GitLab CE and EE

Vulnerabilities have been fixed in GitLab Enterprise Edition EE and Community Edition CE. The vulnerabilities potentially enable a malicious party to perform a Cross-Site Request Forgery XSRF and/or a possible denial-of-service DoS exploit. GitLab has released updates to fix the vulnerabilities i...

UBUNTU-CVE-2022-4205

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash...

PT-2023-13446 · Atlassian +1 · Jira Connect +2

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.5 through 15.3.5 GitLab CE/EE versions 15.4 through 15.4.4 GitLab CE/EE versions 15.5 through 15.5.2 Description: A cross-site scripting issue has been discovered in GitLab CE/EE. It was possible to exploit a...

Vulnerabilities fixed in GitLab CE and EE

Vulnerabilities have been fixed in GitLab Enterprise Edition EE and Community Edition CE. The vulnerabilities potentially enable a malicious person to execute Remote code execution. GitLab has released updates to fix the vulnerabilities in GitLab EE and CE 15.7.5, 15.6.6, and 15.5.9. For more...

UBUNTU-CVE-2022-3514

An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. An attacker may cause Denial of Service on a GitLab instance by exploiting a regex issue in the...

UBUNTU-CVE-2022-4365

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. A malicious Maintainer can leak the sentry token by changing the configured URL in the Sentry error...