CVE-2023-49733

CVE-2023-49733 affects Apache Cocoon 2.2.0 up to versions before 2.3.0. It is an XML External Entity (XXE) reference vulnerability due to improper restriction, enabling potentially sensitive data exposure and other impacts as described in the sources. The recommended remediations are upgrading to...

CVE-2022-45135

The CVE-2022-45135 vulnerability affects Apache Cocoon (notably the DatabaseCookieAuthenticatorAction) with an SQL injection flaw caused by improper neutralization of special elements in SQL commands. Affected versions are 2.2.0 up to 2.2.x prior to 2.3.0; remediation is to upgrade to Apache Coco...