PT-2023-32635 · Opencms · Opencms

Name of the Vulnerable Software and Affected Versions: Open CMS versions 14 through 15 of the 'Mercury' template Description: An open redirect vulnerability has been found in the Open CMS product. This issue allows an attacker to create a specially crafted URL and send it to a specific user,...

Alkacon Software OpenCMS Cross-Site Scripting Vulnerability

Alkacon Software OpenCMS is Germany's Alkacon Software a set of open source Java and XML-based content management system CMS. The system supports template engine, WYSIWYG editor and so on. A cross-site scripting vulnerability exists in Alkacon Software OpenCMS versions 14 and 15, which stems from...

DEBIAN-CVE-2021-23203

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests...