CVE-2022-47414: XSS
Published Feb 7, 2023
·Updated
If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.
Affected Software
1 affected component
OpenKM OpenKM=6.3.12
Event History
Feb 7, 2023
CVE Published
via MITRE·09:41 PM
Data Sourced
via MITRE·09:41 PM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-47414?
The severity of CVE-2022-47414 is rated as medium with a CVSS score of 5.4.
2
How can I exploit CVE-2022-47414?
An attacker with access to the OpenKM console and authenticated can exploit the stored XSS vulnerability in the document 'note' functionality.
3
What software version is affected by CVE-2022-47414?
OpenKM version 6.3.12 is affected by CVE-2022-47414.