Lucene search
GoogleOSV:CVE-2021-3312HistoryOct 08, 2021 - 3:15 p.m.
CVE-2021-3312
2021-10-0815:15:09
Google
osv.dev
5
cve-2021-3312
alkacon opencms
xml external entity
file exfiltration
svg document
remote authenticated users
An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server’s file system by uploading a crafted SVG document.
Related
github
github
XML External Entity Reference in org.opencms:opencms-core
2021-10-12 17:23:40
cnvd
cnvd
Alkacon OpenCms XML External Entity Vulnerability
2021-10-11 00:00:00
osv
osv
XML External Entity Reference in org.opencms:opencms-core
2021-10-12 17:23:40
prion
prion
Xxe
2021-10-08 15:15:00
cve
cve
CVE-2021-3312
2021-10-08 15:15:09
nvd
nvd
CVE-2021-3312
2021-10-08 15:15:09
cvelist
cvelist
CVE-2021-3312
2021-10-08 14:44:58