papermerge@1.2.0 vulnerabilities
Open source document management system (DMS)
-
latest version
1.3.0
-
first published
5 years ago
-
latest version published
4 years ago
-
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the papermerge package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
papermerge is an Open source document management system (DMS) Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the rename, tag, upload, or create folder functions. Also, if email consumption is configured, a malicious document can be sent by email and is automatically uploaded into the web application. How to fix Cross-site Scripting (XSS)? A fix was pushed into the |
[0,)
|