CVE-2023-42343

Impact

A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type.

Affected packages

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/advisories/GHSA-8gpv-c454-3hfc
• https://nvd.nist.gov/vuln/detail/CVE-2023-42343
• https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms
• https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms/