Lucene search
HistoryNov 30, 2023 - 12:15 p.m.
CVE-2023-49733
cve-2023-49733
apache cocoon
xml external entity
upgrade
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.025
Percentile
90.2%
Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0.
Users are recommended to upgrade to version 2.3.0, which fixes the issue.
Affected configurations
Node
apachecocoonRange2.2.0–2.3.0
Related
prion
prion
Xxe
2023-11-30 12:15:00
cve
cve
CVE-2023-49733
2023-11-30 12:15:09
osv
osv
veracode
veracode
XML External Entity (XXE) Injection
2023-12-01 07:06:20
cvelist
cvelist
github
github
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.025
Percentile
90.2%
Related for NVD:CVE-2023-49733