Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.
References
Link | Resource |
---|---|
https://portal.microfocus.com/s/article/KM000032291 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 Aug 2024, 14:45
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:opentext:filr:24.2:*:*:*:*:*:*:* cpe:2.3:a:opentext:filr:24.1.1:*:*:*:*:*:*:* |
|
First Time |
Opentext filr
Opentext |
|
CWE | CWE-79 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
References | () https://portal.microfocus.com/s/article/KM000032291 - Vendor Advisory |
31 Jul 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-31 21:15
Updated : 2024-08-15 14:45
NVD link : CVE-2024-4187
Mitre link : CVE-2024-4187
JSON object : View
Products Affected
opentext
- filr
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')