Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/mayan-edms@4.6.10
Typepypi
Namespace
Namemayan-edms
Version4.6.10
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.10.2
Latest_non_vulnerable_version4.10.2
Affected_by_vulnerabilities
0
url VCID-92gn-k1jm-47fe
vulnerability_id VCID-92gn-k1jm-47fe
summary A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."
references
0
reference_url https://docs.mayan-edms.com/chapters/releases/4.10.2.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://docs.mayan-edms.com/chapters/releases/4.10.2.html
1
reference_url https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security
2
reference_url https://github.com/ionutluca888/Mayan-EDMS-XSS-POC
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://github.com/ionutluca888/Mayan-EDMS-XSS-POC
3
reference_url https://vuldb.com/?ctiid.336409
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://vuldb.com/?ctiid.336409
4
reference_url https://vuldb.com/?id.336409
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://vuldb.com/?id.336409
5
reference_url https://vuldb.com/?submit.711713
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://vuldb.com/?submit.711713
fixed_packages
0
url pkg:pypi/mayan-edms@4.10.2
purl pkg:pypi/mayan-edms@4.10.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mayan-edms@4.10.2
aliases CVE-2025-14691, PYSEC-2025-134
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-92gn-k1jm-47fe
1
url VCID-mynh-sahb-2be8
vulnerability_id VCID-mynh-sahb-2be8
summary A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulation causes open redirect. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 4.10.2 is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."
references
0
reference_url https://docs.mayan-edms.com/chapters/releases/4.10.2.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://docs.mayan-edms.com/chapters/releases/4.10.2.html
1
reference_url https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security
2
reference_url https://github.com/ionutluca888/Mayan-EDMS-OpenRedirect-POC/tree/main
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://github.com/ionutluca888/Mayan-EDMS-OpenRedirect-POC/tree/main
3
reference_url https://vuldb.com/?ctiid.336410
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://vuldb.com/?ctiid.336410
4
reference_url https://vuldb.com/?id.336410
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://vuldb.com/?id.336410
5
reference_url https://vuldb.com/?submit.711729
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://vuldb.com/?submit.711729
fixed_packages
0
url pkg:pypi/mayan-edms@4.10.2
purl pkg:pypi/mayan-edms@4.10.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mayan-edms@4.10.2
aliases CVE-2025-14692, PYSEC-2025-135
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mynh-sahb-2be8
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/mayan-edms@4.6.10