CVE-2012-2316: Openkm

Medium severity, CVSS 6.8. EPSS: 4.3% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp.

Affected products

• Openkm Openkm: version 5.1.7 only; version 5.1.8 only

Published 2012-09-09. Last modified 2026-06-16.