{"id":"CVE-2022-47419","summary":"Mayan EDMS Tag XSS","details":"An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.","aliases":["GHSA-5m6v-2xgf-qhrw","PYSEC-2023-276"],"modified":"2026-08-12T03:51:14.586689407Z","published":"2023-02-07T21:47:48.772Z","database_specific":{"cna_assigner":"rapid7","cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47419.json","unresolved_ranges":[{"extracted_events":[{"introduced":"4.3.3"},{"last_affected":"4.3.3"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47419.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47419"},{"type":"ADVISORY","url":"https://www.mayan-edms.com/news/2023/02/version-4.3.6/"},{"type":"ADVISORY","url":"https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/mayan-edms/mayan-edms","events":[{"introduced":"1a98767d9b26a17868a4d8008471cccc17f5f384"},{"last_affected":"1a98767d9b26a17868a4d8008471cccc17f5f384"}],"database_specific":{"extracted_events":[{"introduced":"4.3.3"},{"last_affected":"4.3.3"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:mayan-edms:mayan_edms:4.3.3:*:*:*:*:*:*:*"}}],"versions":["4.3.3","v4.3.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-47419.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}