CVE-2025-28099

opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,...

CVE-2025-28099

opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,...

CVE-2025-28099

creationtimestamp| type| source ---|---|--- 2025-04-21 17:01:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12704 2025-04-21 19:49:35+00:00| seen| https://t.me/cvedetector/23450 2025-04-21 20:59:10+00:00| seen|...

CVE-2025-28099

opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,...

CVE-2025-28099

opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,...

CVE-2025-28099

opencms V2.3 is vulnerable to an Arbitrary file read flaw located in the src/main/webapp/view/admin/document/dataPage.jsp file. The root cause is characterized as an Improper Limitation of a Pathname to a Restricted Directory (CWE-22 ). This vulnerability allows an attacker to read files on the s...