CVE-2024-35475

2024-05-2214:15:08

[email protected]

web.nvd.nist.gov

cve-2024-35475

cross-site request forgery

openkm community edition

databasequery

administrative privileges

sql commands

8.1 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative privileges to execute arbitrary SQL commands.