Unrated

OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnera...

CVE-2021-3628 First seen on SecPulse Aug 31, 2021

Original description The description as published by the source.

OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnerability by injecting arbitrary code via de uuid parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory docs.openkm.com
advisory incibe-cert.es
patch github.com

Key facts

Severity: Unrated
Published: Aug 31, 2021
First seen on SecPulse: Aug 31, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54