Stored XSS Vulnerability Affects OpenText Filr Products
CVE-2024-4187

5.4MEDIUM

Key Information:

Vendor

Opentext™

Status
Filr
Vendor
CVE Published:
31 July 2024

What is CVE-2024-4187?

Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.

Affected Version(s)

Filr 24.1.1

Filr 24.2

References

https://portal.microfocus.com/s/article/KM000032291

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

Credit

Dmytro Pravytskyi - AWARE7 GmbH
.