CVE-2024-35475

A Cross-Site Request Forgery CSRF vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative privileges to execute arbitrary SQL commands...

CVE-2024-35475

A Cross-Site Request Forgery (CSRF) vulnerability exists in OpenKM Community Edition version 6.3.12 and earlier. The flaw is located in the /admin/DatabaseQuery endpoint, which allows an attacker to manipulate a victim with administrative privileges into executing arbitrary SQL commands . To reme...