CVE-2014-9017: XSS
Cross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 (build 23338) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field in a Task to frontend/index.jsp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9017?
CVE-2014-9017 is classified as a medium severity vulnerability due to the potential for unauthorized script execution.
How do I fix CVE-2014-9017?
To fix CVE-2014-9017, update OpenKM to version 6.4.19 or later to mitigate the XSS vulnerability.
Who is affected by CVE-2014-9017?
CVE-2014-9017 affects OpenKM versions up to and including 6.4.18, impacting remote authenticated users.
What type of vulnerability is CVE-2014-9017?
CVE-2014-9017 is a Cross-Site Scripting (XSS) vulnerability that allows script injection via the Task Subject field.
Can CVE-2014-9017 lead to data theft?
Yes, CVE-2014-9017 could potentially lead to data theft as attackers can execute arbitrary scripts in the context of a logged-in user.