PT-2023-15294 · Openkm · Openkm

Matthew Kienow · Published 2023-02-07 · Updated 2025-03-25 · CVE-2022-47414

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenKM (affected versions not specified)

Description A stored XSS issue is present in the document "note" functionality of OpenKM, accessible if an attacker has console access and is authenticated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-47414

Affected Products

Openkm

References · 7

• 🔥 https://rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419 · Exploit
• https://osv.dev/vulnerability/CVE-2022-47414 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47414 · Security Note
• https://t.me/cvenotify/116097 · Telegram Post
• https://t.me/cibsecurity/57716 · Telegram Post
• https://t.me/cvenotify/43829 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47414 · Note