papermerge

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

papermerge records in CISA KEV

No papermerge vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Papermerge 1 record LOW

Records

1 record in Papermerge · all components

TI-2020-17690 CVE-2020-29456 · GHSA-9w49-m7xh-5r39

Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow…

LOW 30

Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01559 Published 2020-12-02 Fixed in 1.5.2 CWE-79

Open these records in search →

Critical	0
High	3
Medium	2
Low	1
No CVSS	0