CVE-2021-33950

An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-02-17

Last modified

2025-03-18

Weaknesses

CWE-611

Affected products

• Openkm (Openkm)

References

• https://github.com/openkm/document-management-system/commit/ce1d82329615aea6aa9f2cc6508c1fe7891e34b5
• https://github.com/openkm/document-management-system/issues/287
• https://github.com/openkm/document-management-system/pull/288