CVE-2023-42345

Impact

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp.

Affected packages

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/advisories/GHSA-2887-f3v6-6rjf
• https://nvd.nist.gov/vuln/detail/CVE-2023-42345
• https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms
• https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms/