← Database

CVE-2022-2131

HIGH CVSS: 8.5 Published: 2022-07-25 Modified: 2026-06-17

Description

OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack.

Affected Platforms

Openkm Openkm

Weakness Type

CWE-611, CWE-611

References