Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Cocoon

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-49733

    Apache Cocoon's StreamGenerator is vulnerable to XXE injection

    Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue.

    Apache Software Foundation Apache Cocoon org.apache.cocoon:cocoon Maven
  • Critical 9.8
    CVE-2022-45135

    Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue.

    Apache Software Foundation Apache Cocoon org.apache.cocoon:cocoon Maven