CVE-2022-47413: XSS
Published Feb 7, 2023
·Updated
Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.
Affected Software
1 affected component
OpenKM OpenKM=6.3.12
Event History
Feb 7, 2023
CVE Published
via MITRE·09:37 PM
Data Sourced
via MITRE·09:37 PM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-47413?
The severity of CVE-2022-47413 is rated as medium with a CVSS score of 5.4.
2
How does CVE-2022-47413 impact OpenKM DMS?
CVE-2022-47413 exposes OpenKM DMS to a stored XSS vulnerability when a malicious document is provided by an attacker.
3
What is the CWE associated with CVE-2022-47413?
CVE-2022-47413 is associated with CWE-79, which is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').