high7.5
CVE-2021-33950
An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function.
Impact
An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openkm | Openkm | Version 6.3.10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/openkm/document-management-system/commit/ce1d82329615aea6aa9f2cc6508c1fe7891e34b5
- https://github.com/openkm/document-management-system/issues/287
- https://github.com/openkm/document-management-system/pull/288
- https://github.com/openkm/document-management-system/commit/ce1d82329615aea6aa9f2cc6508c1fe7891e34b5
- https://github.com/openkm/document-management-system/issues/287
- https://github.com/openkm/document-management-system/pull/288