CVE-2014-8957: XSS
Published Oct 6, 2017
·Updated
Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 allows remote authenticated users to inject arbitrary web script or HTML via the Tasks parameter.
Affected Software
1 affected component
OpenKM OpenKM<=6.4.18
Event History
Oct 6, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8957?
The severity of CVE-2014-8957 is classified as medium due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-8957?
To fix CVE-2014-8957, upgrade OpenKM to version 6.4.19 or later.
3
Who is affected by CVE-2014-8957?
CVE-2014-8957 affects users of OpenKM versions prior to 6.4.19, particularly remote authenticated users.
4
What type of attack does CVE-2014-8957 allow?
CVE-2014-8957 allows cross-site scripting (XSS) attacks, enabling injection of arbitrary web scripts or HTML.
5
When was CVE-2014-8957 disclosed?
CVE-2014-8957 was disclosed in December 2014.