CVE-2023-42346

Alkacon OpenCms before 16 allows XXE when the refers to an external host...

org.opencms:opencms-components (9.5.0), org.opencms:opencms-gwt (9.5.0) +19 more potentially affected by CVE-2023-42346 via org.opencms:opencms-core (9.5.0)

org.opencms:opencms-core MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-components 9.5.0 - org.opencms:opencms-gwt 9.5.0 - org.opencms:opencms-setup 9.5.0 -...

de.eonas.portal.demo:content (0.1), de.eonas.portal.demo:templates (0.1) +2 more potentially affected by CVE-2023-42346 via org.opencms:opencms-core (8.0.3.1)

org.opencms:opencms-core MAVEN version 8.0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal.demo:content 0.1 - de.eonas.portal.demo:templates 0.1 -...

org.opencms:opencms-setup (8.0.3-rev), org.opencms:opencms-upload (8.0.3-rev) +16 more potentially affected by CVE-2023-42346 via org.opencms:opencms-core (8.0.3-rev)

org.opencms:opencms-core MAVEN version 8.0.3-rev is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-setup 8.0.3-rev - org.opencms:opencms-upload 8.0.3-rev -...

org.opencms.modules:com.alkacon.opencms.v8.event (>=8.5.0, <=8.5.1), org.opencms.modules:com.alkacon.opencms.v8.flexible (>=8.5.0, <=8.5.1) +63 more potentially affected by CVE-2023-42346 via org.opencms:opencms-core (8.5.0)

org.opencms:opencms-core MAVEN version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event =8.5.0, =8.5.0, =8.5.0, =8.5.0, =8.0.2.1, =8.5.0, =8.5.0,...