high7.5
CVE-2023-42346
Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.
Impact
Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.opencms:opencms-core | < 16.0 | 16.0 |