Threats tagged 'ghsa-vfwg-j93f-wfr4'

A cross-site scripting (XSS) vulnerability exists in Kotaemon version 0.11.0 that allows attackers to execute arbitrary code via a crafted PDF file. This vulnerability can lead to partial confidentiality and integrity impact but does not affect availability. The vulnerability requires user interaction and can be exploited remotely over the network.