PT-2023-15296 · Unknown · Logicaldoc Enterprise

Matthew Kienow · Publicado 2023-02-07 · Atualizado 2025-03-25 · CVE-2022-47416

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise (affected versions not specified)

Description The issue is a stored cross-site scripting (XSS) condition in the in-app chat system. This type of XSS occurs when malicious code is stored on the server and then executed by the browser when the affected page is viewed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2022-47416

Produtos afetados

Logicaldoc Enterprise

Referências · 7

• 🔥 https://rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419 · Exploit
• https://t.me/cvenotify/116057 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-47416 · Aviso do Fabricante
• https://t.me/cibsecurity/57711 · Publicação no Telegram
• https://t.me/cvenotify/43827 · Publicação no Telegram
• https://t.me/cvenotify/44477 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-47416 · Nota de Segurança