CVE-2024-35475

1976-01-0100:00:00

mitre

www.cve.org

7.8 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative privileges to execute arbitrary SQL commands.