Unrated severityNVD Advisory· Published Nov 13, 2022· Updated Apr 15, 2025

OpenKM FileUtils.java getFileExtension temp file

CVE-2022-3969

Description

A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function getFileExtension of the file src/main/java/com/openkm/util/FileUtils.java. The manipulation leads to insecure temporary file. Upgrading to version 6.3.12 is able to address this issue. The name of the patch is c069e4d73ab8864345c25119d8459495f45453e1. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213548.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openkm/Openkmllm-fuzzy
Range: <=6.3.11
unspecified/OpenKMv5
Range: 6.3.0

Patches

Vulnerability mechanics

References

github.com/openkm/document-management-system/commit/c069e4d73ab8864345c25119d8459495f45453e1mitre
github.com/openkm/document-management-system/pull/332mitre
github.com/openkm/document-management-system/releases/tag/v6.3.12mitre
vuldb.commitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000