org.opencms:opencms-components (9.0.1), org.opencms:opencms-gwt (9.0.1) +19 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (9.0.1)

org.opencms:opencms-core MAVEN version 9.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.0.1 - org.opencms:opencms-gwt 9.0.1 - org.opencms:opencms-setup 9.0.1 -...

de.eonas.portal:opencmsinstaller (9.5.1.0), de.eonas.portal:opencmsportaldriver (9.5.1.0) +21 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (9.5.1)

org.opencms:opencms-core MAVEN version 9.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.1.0 - de.eonas.portal:opencmsportaldriver 9.5.1.0 -...

de.eonas.portal:opencmsinstaller (8.5.1.1), de.eonas.portal:opencmsportaldriver (>=8.5.1.1, <=9.0.0.7) +12 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (8.5.1)

org.opencms:opencms-core MAVEN version 8.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 8.5.1.1 - de.eonas.portal:opencmsportaldriver =8.5.1.1, =9.0.0.7 -...

org.opencms.modules:com.alkacon.opencms.v8.article (>=8.0.1, <=8.0.4), org.opencms.modules:com.alkacon.opencms.v8.event (>=8.0.1, <=8.0.3) +65 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (8.0.1)

org.opencms:opencms-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.article =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1,...

de.eonas.portal:opencmsinstaller (9.5.2.0), de.eonas.portal:opencmsportaldriver (9.5.2.0) +21 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (9.5.2)

org.opencms:opencms-core MAVEN version 9.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.2.0 - de.eonas.portal:opencmsportaldriver 9.5.2.0 -...

de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +2 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (8.0.3.1)

org.opencms:opencms-core MAVEN version 8.0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal.demo:content 0.1 - de.eonas.portal.demo:templates 0.1 -...

CVE-2019-13236

Alkacon OpenCms 10.5.4 and 10.5.5 are affected by multiple Reflected and Stored XSS vulnerabilities in the system/workplace/ management interface. Root cause is not explicitly detailed beyond XSS in the provided documents. The issues could allow execution of arbitrary scripts in authenticated use...

de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +107 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (>=8.0.1, <=9.5.3)

org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2019-13236 Source advisory: MEND:CVE-2019-13236...