CVE-2021-33950: XEE
Published Feb 17, 2023
·Updated
An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function.
Affected Software
1 affected component
OpenKM OpenKM=6.3.10
Remediation
Event History
Feb 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-33950?
CVE-2021-33950 has been classified with a moderate severity level due to its potential to expose sensitive information.
2
How do I fix CVE-2021-33950?
To mitigate CVE-2021-33950, users should upgrade to a newer version of OpenKM that addresses this vulnerability.
3
What types of information can be exposed by CVE-2021-33950?
CVE-2021-33950 can allow attackers to retrieve sensitive information stored within the OpenKM system.
4
Is OpenKM version 6.3.10 the only version affected by CVE-2021-33950?
Yes, CVE-2021-33950 specifically affects OpenKM version 6.3.10.
5
Are there any known exploits for CVE-2021-33950?
As of now, there are no public exploits documented for CVE-2021-33950, but the vulnerability poses a risk if left unpatched.