Non évaluée

OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnera...

CVE-2021-3628 Première détection SecPulse Aug 31, 2021

Description d'origine La description telle que publiée par la source (souvent en anglais).

OpenKM Community Edition in its 6.3.10 version is vulnerable to authenticated Cross-site scripting (XSS). A remote attacker could exploit this vulnerability by injecting arbitrary code via de uuid parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory docs.openkm.com
advisory incibe-cert.es
patch github.com

Faits clés

Gravité: Non évaluée
Publication: Aug 31, 2021
Première détection SecPulse: Aug 31, 2021

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54