CVE-2023-42344

n/a / n/a PUBLISHED

Description (CNA)

Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms/

ADP enrichment

CISA-ADP

No English description supplied.

https://github.com/projectdiscovery/nuclei-templates/issues/8864