Description
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenKM | OpenKM | 6.3.12 | — |
Medium · 5.4
CVE-2022-47414
EUVD-2022-50177GHSA-rr3r-2gr7-hh53
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" …
Published Feb 7, 2023 · Updated Mar 25, 2025 · Assigned by rapid7