Description
OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpoint. Attackers can submit malicious script content with an action=Evaluate parameter to execute operating system commands in the context of the OpenKM application server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Openkm OpenKM Community Edition
Default version status: unknown
0 to ≤ 6.3.12affected
Openkm OpenKM Professional Edition
Default version status: unknown
0 to ≤ 7.1.47affected
References
- https://www.exploit-db.com/exploits/52520 ↗
- https://www.openkm.com/ ↗
- https://hub.docker.com/r/openkm/openkm-ce ↗
- https://terrasystemlabs.com/post?slug=openkm-zero-day-vulnerabilities-terra-system-labs ↗
- https://github.com/terrasystemlabs/Exploits/tree/main/OpenKM-Exploits ↗
- https://github.com/terrasystemlabs/Exploits/tree/main/OpenKM-Exploits/nuclei-templates/openkm-remote-code-execution ↗
- https://www.vulncheck.com/advisories/openkm-remote-code-execution-via-administrative-scripting ↗