cve.bz

CVE-2023-42344

7.3 highEPSS 2.3%

Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.

CVSS 3.1
7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS
2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-28)
CWE
CWE-611
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-rcc6-6q2f-m2cwMavenorg.opencms:opencms-core<10.5.110.5.1

References

Check your stackJSON