CVE-2022-40317: XSS
Published Sep 9, 2022
·Updated
OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.
Affected Software
1 affected component
OpenKM OpenKM=6.3.11
Remediation
Event History
Sep 9, 2022
CVE Published
via MITRE·04:45 PM
Data Sourced
via MITRE·04:45 PM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-40317?
The severity of CVE-2022-40317 is considered medium due to its potential for stored cross-site scripting attacks.
2
How do I fix CVE-2022-40317?
To fix CVE-2022-40317, upgrade OpenKM to a version that contains the necessary security patches addressing the stored XSS vulnerability.
3
What software version is affected by CVE-2022-40317?
CVE-2022-40317 specifically affects OpenKM version 6.3.11.
4
What type of vulnerability is CVE-2022-40317?
CVE-2022-40317 is a stored cross-site scripting (XSS) vulnerability.
5
What does stored XSS mean in relation to CVE-2022-40317?
Stored XSS in CVE-2022-40317 means that malicious scripts can be permanently stored on the server and executed when users access the affected page.