Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2014-3840
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-27 May, 2014 | 13:55
Updated At-12 Apr, 2025 | 10:46

Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.13 allow remote authenticated users to inject arbitrary web script or HTML via a (1) tag or the (2) title of a source in a Staging folder, (3) Name field in a bootstrap setup, or Title field in a (4) smart link or (5) web form.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.03.5LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N
Type: Primary
Version: 2.0
Base score: 3.5
Base severity: LOW
Vector:
AV:N/AC:M/Au:S/C:N/I:P/A:N
CPE Matches
mayan-edms
mayan-edms
>>mayan_edms>>0.13
cpe:2.3:a:mayan-edms:mayan_edms:0.13:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
CWE ID: CWE-79
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://research.openflare.org/advisories/OF-2014-09/mayan-edbs-storedxss.txtcve@mitre.org
Exploit
http://research.openflare.org/poc/maya-edms/maya-edms_multiple_xss.avicve@mitre.org
N/A
http://seclists.org/oss-sec/2014/q2/349cve@mitre.org
N/A
http://seclists.org/oss-sec/2014/q2/352cve@mitre.org
N/A
http://www.exploit-db.com/exploits/33493cve@mitre.org
N/A
http://www.securityfocus.com/bid/67552cve@mitre.org
N/A
https://github.com/mayan-edms/mayan-edms/commit/398c480c10416d76e7c1dcb607e726e8fc988e72cve@mitre.org
Exploit
Patch
https://github.com/mayan-edms/mayan-edms/issues/3cve@mitre.org
N/A
http://research.openflare.org/advisories/OF-2014-09/mayan-edbs-storedxss.txtaf854a3a-2127-422b-91ae-364da2661108
Exploit
http://research.openflare.org/poc/maya-edms/maya-edms_multiple_xss.aviaf854a3a-2127-422b-91ae-364da2661108
N/A
http://seclists.org/oss-sec/2014/q2/349af854a3a-2127-422b-91ae-364da2661108
N/A
http://seclists.org/oss-sec/2014/q2/352af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.exploit-db.com/exploits/33493af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/67552af854a3a-2127-422b-91ae-364da2661108
N/A
https://github.com/mayan-edms/mayan-edms/commit/398c480c10416d76e7c1dcb607e726e8fc988e72af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
https://github.com/mayan-edms/mayan-edms/issues/3af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://research.openflare.org/advisories/OF-2014-09/mayan-edbs-storedxss.txt
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: http://research.openflare.org/poc/maya-edms/maya-edms_multiple_xss.avi
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2014/q2/349
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2014/q2/352
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.exploit-db.com/exploits/33493
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/67552
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://github.com/mayan-edms/mayan-edms/commit/398c480c10416d76e7c1dcb607e726e8fc988e72
Source: cve@mitre.org
Resource:
Exploit
Patch
Hyperlink: https://github.com/mayan-edms/mayan-edms/issues/3
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://research.openflare.org/advisories/OF-2014-09/mayan-edbs-storedxss.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: http://research.openflare.org/poc/maya-edms/maya-edms_multiple_xss.avi
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2014/q2/349
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2014/q2/352
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.exploit-db.com/exploits/33493
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/67552
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://github.com/mayan-edms/mayan-edms/commit/398c480c10416d76e7c1dcb607e726e8fc988e72
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Patch
Hyperlink: https://github.com/mayan-edms/mayan-edms/issues/3
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found