Skip to content
OpenAdvisories

Product · Openkm

OpenKM Document Management Community

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2022-2131

    OpenKM XXE Injection

    OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack.

    Openkm OpenKM Document Management Community