I Librarian Free
Approved changes feed: RSS · Atom
cpe:2.3:a:mkucej:i-librarian-free:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mkucej (9b981533-e223-553c-8762-e0066b4f2102) |
|---|---|
| Product | I Librarian Free (654dbac0-a6a3-562f-b8b2-e0969a92e5d5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-50344 |
vulnerable | 2026-06-08 06:52:09.703312 |
I, Librarian has a Stored XSS vulnerability in Supplemental Files
MEDIUM (4.6)
I, Librarian is an open-source version of a PDF managing SaaS. Supplemental Files are allowed to be viewed in the browser, only if they have a white-listed MIME type. Unfortunately, this logic is broken, thus allowing unsafe files containing Javascript to be executed with the application context. An attacker can exploit this vulnerability by uploading a supplementary file that contains a malicious code or script. This code will then be executed when the file is loaded in the browser. The vulnerability was fixed in version 5.11.2.
Published: 2024-10-30T15:51:30.047Z
Updated: 2024-10-30T16:02:30.738Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41943 |
vulnerable | 2026-06-08 06:43:55.713240 |
I, Librarian Stored XSS vulnerability in Item Summary
MEDIUM (4.6)
I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without any form of validation or sanitation. An attacker can exploit this vulnerability by inserting a payload in the PDF notes that contains malicious code or script. This code will then be executed when the page is loaded in the browser. The vulnerability was fixed in version 5.11.1.
Published: 2024-07-30T17:27:21.009Z
Updated: 2024-08-02T04:54:31.319Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.