CVE-2023-42346

Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.

HighCWE-611 All CVEs

Weakness

Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.

References

https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms/

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.

Start a free audit See pricing