Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr3r-2gr7-hh53

Опубликовано: 08 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.

If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.

EPSS

Процентиль: 45%
0.00221
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 3 лет назад

If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.

EPSS

Процентиль: 45%
0.00221
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79