CVE-2024-35475

Mô tả

Tham khảo

• carsonchan12345/CVE-2024-35475 · Third Party Advisory
• carsonchan12345/OpenKM-CSRF-PoC · Broken Link

Lỗ hổng khác của openkm

• CVE-2025-57244TRUNG BÌNH 5.4OpenKM Community Edition 6.3.12 is vulnerable to stored cross-site scripting (XSS) in the user account creation interface. The Name field ac…
• CVE-2023-50072TRUNG BÌNH 5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension that allows an authe…
• CVE-2021-33950CAO 7.5An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function.
• CVE-2022-47414TRUNG BÌNH 5.4 If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" …
• CVE-2022-47413TRUNG BÌNH 5.4 Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.