CVE-2012-2316

Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to…

published September 9, 2012

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04254 · 91.0th percentile
Published
2012-09-09T21:00Z
EPSS history
Timeline
  • 09 SEP 21:00Z
    Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to…
    cvelistv5