CVE-2024-4187

Stored XSS vulnerability has been discovered in OpenText™ Filr. The vulnerability could cause users to not be warned when clicking links to external sites.

State: Published
Severity: 2.1 Low
Published: Jul 31, 2024
Updated: Aug 12, 2024
Reserved: Apr 25, 2024

Read the record on cve.org

Description

Stored XSS vulnerability has been discovered in OpenText™ Filr product, affecting versions 24.1.1 and 24.2. The vulnerability could cause users to not be warned when clicking links to external sites.

Scores

CVSS	Score	Vector	Source
4.0	2.1 Low	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:P/AU:N/V:D/RE:L/U:Green	OpenText

Weaknesses

CWE-356 Product UI does not Warn User of Unsafe Actions

Affected Products

Product	Versions
FilrOpenText™	24.1.1Affected 24.2Affected

References

https://portal.microfocus.com/s/article/KM000032291

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.