CVE-2023-42346

Alkacon OpenCms before 16 allows XXE when the refers to an external host...