org.opencms.modules:com.alkacon.opencms.v8.event (8.5.2), org.opencms.modules:com.alkacon.opencms.v8.news (8.5.2) +31 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (8.5.2)

org.opencms:opencms-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event 8.5.2 - org.opencms.modules:com.alkacon.opencms.v8.news 8.5.2 ...

org.opencms.modules:com.alkacon.opencms.v8.event (>=8.5.0, <=8.5.1), org.opencms.modules:com.alkacon.opencms.v8.flexible (>=8.5.0, <=8.5.1) +63 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (8.5.0)

org.opencms:opencms-core MAVEN version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event =8.5.0, =8.5.0, =8.5.0, =8.5.0, =8.0.2.1, =8.5.0, =8.5.0,...

org.opencms.modules:com.alkacon.opencms.v8.article (>=8.0.1, <=8.0.4), org.opencms.modules:com.alkacon.opencms.v8.event (>=8.0.1, <=8.0.3) +65 more potentially affected by CVE-2019-13236 via org.opencms:opencms-core (8.0.1)

org.opencms:opencms-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.article =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1,...

org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2019-13236 via org.opencms:opencms-core (8.0.4)

org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2019-13236 Source advisory: OSV:GHSA-7QQR-3PJ3-Q2F5...

XSS issues in the management interface

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface...

XSS in login form

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form...

GHSA-2P6P-V69P-9MM9 XSS in login form

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form...

org.opencms.modules:com.alkacon.opencms.v8.event (>=8.5.0, <=8.5.1), org.opencms.modules:com.alkacon.opencms.v8.flexible (>=8.5.0, <=8.5.1) +63 more potentially affected by CVE-2019-13235 via org.opencms:opencms-core (8.5.0)

org.opencms:opencms-core MAVEN version 8.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event =8.5.0, =8.5.0, =8.5.0, =8.5.0, =8.0.2.1, =8.5.0, =8.5.0,...

org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2019-13235 via org.opencms:opencms-core (8.0.4)

org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2019-13235 Source advisory: OSV:GHSA-2P6P-V69P-9MM9...

de.eonas.portal:opencmsinstaller (9.5.2.0), de.eonas.portal:opencmsportaldriver (9.5.2.0) +21 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (9.5.2)

org.opencms:opencms-core MAVEN version 9.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.2.0 - de.eonas.portal:opencmsportaldriver 9.5.2.0 -...

org.opencms.modules:com.alkacon.opencms.v8.event (8.5.2), org.opencms.modules:com.alkacon.opencms.v8.news (8.5.2) +31 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.5.2)

org.opencms:opencms-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event 8.5.2 - org.opencms.modules:com.alkacon.opencms.v8.news 8.5.2 ...

org.opencms.modules:com.alkacon.opencms.v8.article (>=8.0.1, <=8.0.4), org.opencms.modules:com.alkacon.opencms.v8.event (>=8.0.1, <=8.0.3) +65 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.0.1)

org.opencms:opencms-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.article =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1,...

org.opencms:opencms-webapp (8.0.4) potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.0.4)

org.opencms:opencms-core MAVEN version 8.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.4 Source cves: CVE-2019-13237 Source advisory: OSV:GHSA-36HF-6HP2-9G4C...

org.opencms:opencms-setup (8.0.3-rev), org.opencms:opencms-upload (8.0.3-rev) +16 more potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.0.3-rev)

org.opencms:opencms-core MAVEN version 8.0.3-rev is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-setup 8.0.3-rev - org.opencms:opencms-upload 8.0.3-rev -...

Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms

In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, groupnew.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workplace/admin/history/settings/index.jsp...

GHSA-36HF-6HP2-9G4C Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms

In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, groupnew.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workplace/admin/history/settings/index.jsp...

org.opencms:opencms-webapp (8.0.2) potentially affected by CVE-2019-13237 via org.opencms:opencms-core (8.0.2)

org.opencms:opencms-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms:opencms-webapp 8.0.2 Source cves: CVE-2019-13237 Source advisory: OSV:GHSA-36HF-6HP2-9G4C...

org.opencms.modules:com.alkacon.opencms.v8.event (8.5.2), org.opencms.modules:com.alkacon.opencms.v8.news (8.5.2) +31 more potentially affected by CVE-2019-13234 via org.opencms:opencms-core (8.5.2)

org.opencms:opencms-core MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.event 8.5.2 - org.opencms.modules:com.alkacon.opencms.v8.news 8.5.2 ...

org.opencms.modules:com.alkacon.opencms.v8.article (>=8.0.1, <=8.0.4), org.opencms.modules:com.alkacon.opencms.v8.event (>=8.0.1, <=8.0.3) +65 more potentially affected by CVE-2019-13234 via org.opencms:opencms-core (8.0.1)

org.opencms:opencms-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - org.opencms.modules:com.alkacon.opencms.v8.article =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1,...

de.eonas.portal:opencmsinstaller (9.5.2.0), de.eonas.portal:opencmsportaldriver (9.5.2.0) +21 more potentially affected by CVE-2019-13234 via org.opencms:opencms-core (9.5.2)

org.opencms:opencms-core MAVEN version 9.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.opencms:opencms-core and may be impacted: - de.eonas.portal:opencmsinstaller 9.5.2.0 - de.eonas.portal:opencmsportaldriver 9.5.2.0 -...