CVE-2012-2316

Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

4.25% chance of exploitation in the next 30 days, 90th percentile

Published

2012-09-09

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18888

References

• CVE Record
• NVD entry

Related

• CVE-2012-2315
• CVE-2012-2329
• CVE-2012-2311
• CVE-2012-2331
• CVE-2012-2288
• CVE-2012-2332