PT-2021-21197
CVE-2021-3628
·
تاريخ النشر
2021-08-30
·
تاريخ التحديث
2021-09-03
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
OpenKM Community Edition version 6.3.10
Description
The issue concerns an authenticated Cross-site scripting (XSS) vulnerability. A remote attacker could exploit this by injecting arbitrary code via the
uuid parameter.Recommendations
For OpenKM Community Edition version 6.3.10, consider restricting access to the
uuid parameter to minimize the risk of exploitation until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾