| Package | Affected versions | Patched versions |
|---|---|---|
| openkm | ≤ 6.3.10 |
OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free