Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2022/11/13 12:0 a.m.37 views

CVE-2022-3969 OpenKM FileUtils.java getFileExtension temp file

A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function getFileExtension of the file src/main/java/com/openkm/util/FileUtils.java. The manipulation leads to insecure temporary file. Upgrading to version 6.3.12 is able to address this...

2.6CVSS5.8AI score0.00526EPSS
SaveExploits1References4
CVE
CVE
added 2022/11/13 12:0 a.m.57 views

CVE-2022-3969

OpenKM up to 6.3.11 contains a vulnerability in getFileExtension (src/main/java/com/openkm/util/FileUtils.java) that can lead to an insecure temporary file. Root cause: manipulation of file extension handling. The fix is upgrading to OpenKM 6.3.12, with patch c069e4d73ab8864345c25119d8459495f4545...

5.5CVSS4.6AI score0.00526EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder