OpenKM 安全漏洞

OpenKM is a document management system from the Spanish company OpenKM. The system provides features such as version control, document history and file sharing. A security vulnerability exists in OpenKM 6.3.12 and earlier versions, which stems from a cross-site request forgery CSRF vulnerability ...

CVE-2024-35475: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative privileges to execute arbitrary SQL commands...