CVE-2022-47418

LogicalDOC Enterprise and CE are affected by a stored (Type II) cross-site scripting (XSS) in document version comments. Vulnerable component: the document version comments handling in LogicalDOC; root cause described as a stored XSS condition. Impact: confidentiality and integrity may be affecte...

CVE-2022-47418 LogicalDOC Document Version Comment Stored XSS

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document version comments...

CVE-2022-47417 LogicalDOC Document File Name Stored XSS

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document file name...

CVE-2022-47417 LogicalDOC Document File Name Stored XSS

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document file name...

CVE-2022-47417

CVE-2022-47417 affects LogicalDOC Enterprise and Community Edition (CE). The issue is a stored (persistent) cross-site scripting (XSS) vulnerability in the document file name. The provided documents specify the vulnerability type and affected product, but do not include concrete exploit details, ...

CVE-2022-47416 LogicalDOC Chat Stored XSS

LogicalDOC Enterprise is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app chat system...

CVE-2022-47416 LogicalDOC Chat Stored XSS

LogicalDOC Enterprise is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app chat system...

CVE-2022-47416

Technical details for CVE-2022-47416 are not provided in the connected documents. The Initial Description notes a stored XSS in LogicalDOC Enterprise's in-app chat; no product versions, impact, or remediation are detailed here. Monitor for updates.

CVE-2022-47415 LogicalDOC Messaging Stored XSS

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app messaging system both subject and message bodies...

CVE-2022-47415 LogicalDOC Messaging Stored XSS

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app messaging system both subject and message bodies...

CVE-2022-47415

Technical details about CVE-2022-47415 are not publicly available in the provided Connected documents. Monitor official advisories and CVE listings for affected products, impact, and available patches.

Multiple DMS XSS (CVE-2022-47412 through CVE-20222-47419)

Through the course of routine security testing and analysis, Rapid7 has discovered several issues in on-premises installations of open source and freemium Document Management System DMS offerings from four vendors. While all of the discovered issues are instances of CWE-79: Improper Neutralizatio...

Logicaldoc LogicalDOC cross-site scripting vulnerabilities

LogicalDOC is the U.S. LogicalDOC company a set of document management system developed using Java technology . The system has features such as Lucene full-text search indexing and automatic import. A security vulnerability exists in LogicalDOC Enterprise and Community Edition CE. An attacker cou...

CVE-2022-47418: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document version comments...

CVE-2022-47417: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the document file name...

CVE-2022-47416: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app chat system...

CVE-2022-47415: Improper Neutralization of Input During Web Page Generation

LogicalDOC Enterprise and Community Edition CE are vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition in the in-app messaging system both subject and message bodies...

PT-2023-15297

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise and Community Edition CE affected versions not specified Description The issue is a stored cross-site scripting XSS condition, specifically a "Type II" or persistent XSS, that occurs in the document file name. This means...

PT-2023-15295

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise and Community Edition CE affected versions not specified Description The issue is related to a stored cross-site scripting XSS condition in the in-app messaging system, affecting both subject and message bodies. This type...

PT-2023-15296

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise affected versions not specified Description The issue is a stored cross-site scripting XSS condition in the in-app chat system. This type of XSS occurs when malicious code is stored on the server and then executed by the...