Security Advisory

CVE-2008-7231

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-09-14 14:00:00
Last updated 2024-08-07 11:56:14
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title).