CVE-2022-47414

2023-02-0721:41:39

CWE-79

rapid7

www.cve.org

openkm

console access

stored xss

note functionality

vulnerability

2022

0.001 Low

EPSS

Percentile

23.5%

JSON

If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document “note” functionality.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "OpenKM",
    "vendor": "OpenKM",
    "versions": [
      {
        "status": "affected",
        "version": "6.3.12"
      }
    ]
  }
]