CVE-2024-4187CWE-356

Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.

Low · published July 31, 2024

CVSS v4.0
2.1
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:P/AU:N/V:D/RE:L/U:Green
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-356 · Product UI does not Warn User of Unsafe Actions
Published
2024-07-31T20:28Z
EPSS history
Timeline
  • 31 JUL 20:28Z
    Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.
    cvelistv5