PT-2023-7552 · Opencms · Opencms

Published 2023-08-07 · Updated 2026-05-10 · CVE-2023-42346

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenCMS (affected versions not specified)

Description The issue in OpenCMS is related to the failure to neutralize special elements. This could allow a remote attacker to impact the confidentiality, integrity, and availability of information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

XXE

Weakness Enumeration

CWE-74

CWE-611

Related Identifiers

BDU:2023-08607

CVE-2023-42346

GHSA-PJ6P-9P8X-5MFC

Affected Products

Opencms

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-42346 · Security Note
• https://osv.dev/vulnerability/GHSA-pj6p-9p8x-5mfc · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08607 · Security Note
• https://github.com/alkacon/opencms-core · Note
• https://t.me/secharvester/14735 · Telegram Post
• https://t.me/secharvester/14739 · Telegram Post
• https://twitter.com/CVEnew/status/2053559156108341500 · Twitter Post
• https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms · Note