PT-2018-18190 · Opentext · Opentext Documentum D2 Webtop

Vipin Chaudhary · Publicado 2018-04-11 · Atualizado 2018-05-16 · CVE-2018-7659

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenText Documentum D2 Webtop version 4.6.0030 build 059

Description A Stored Cross-Site Scripting issue could potentially be exploited by malicious users to compromise the affected system via a filename of an uploaded image file.

Recommendations For OpenText Documentum D2 Webtop version 4.6.0030 build 059, consider restricting the upload of image files or validating filenames to prevent malicious input until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-7659

Produtos afetados

Opentext Documentum D2 Webtop

Referências · 3

• 🔥 https://vipinxsec.blogspot.com/2018/04/stored-xss-in-documentum-d2-steps-to.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-7659 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7659 · Nota de Segurança