Skip to content
OpenAdvisories

Package · Maven

org.opencms:opencms-core

31 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-42346

    Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host

    Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.

    org.opencms:opencms-core Maven
  • High 7.3
    CVE-2023-42344 Scanner template

    Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information

    Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.

    org.opencms:opencms-core Maven
  • High 7.8
    CVE-2019-11819

    Alkacon OpenCMS CSV Injection via New User module

    Alkacon OpenCMS v10.5.4 and before is affected by CSV (aka Excel Macro) Injection in the module New User (/opencms/system/workplace/admin/accounts/user_new.jsp) via the First Name or Last Name.

    org.opencms:opencms-core Maven