CVE-2022-47414
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functional...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
Références
- advisory github.com
- advisory nvd.nist.gov
- web rapid7.com