Stored Cross-Site Scripting Vulnerability in OpenKM Document Management System

CVE-2022-47413

What is CVE-2022-47413?

The OpenKM Document Management System is susceptible to a stored XSS attack due to insufficient input sanitization. Attackers can exploit this vulnerability by submitting a malicious document that could be stored on the server. When accessed by users, the malicious payload is executed in their browsers, potentially compromising sensitive information and leading to unauthorized actions. Organizations using OpenKM DMS should assess their exposure to this vulnerability and implement appropriate security measures to mitigate potential risks.

References