Security
فارسی
All products

org.opencms:opencms-core

Maven · Package
31 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Alkacon OpenCms is vulnerable to XSS via cmis-online/typeCVE-2023-42343 · GHSA-8GPV-C454-3HFC org.opencms:opencms-core Maven Medium Fix reported
Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive informationCVE-2023-42344 · GHSA-RCC6-6Q2F-M2CW org.opencms:opencms-core Maven High Fix reported
Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external hostCVE-2023-42346 · GHSA-PJ6P-9P8X-5MFC org.opencms:opencms-core Maven High Fix reported
Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jspCVE-2023-42345 · GHSA-2887-F3V6-6RJF org.opencms:opencms-core Maven Medium Fix reported
Alkacon OpenCMS XSS via New User moduleCVE-2019-11818 · GHSA-C8J6-GQQ8-4PRJ org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS XSS via Mercury templateCVE-2023-6379 · GHSA-W62V-Q77R-66CC org.opencms:opencms-core Maven Medium Fix reported
Alkacon OpenCMS XSS via title and requestedResource parametersCVE-2013-4600 · GHSA-4GFX-P2J4-W2VH org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parametersCVE-2015-2351 · GHSA-6C8C-F2W2-JVJR org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jspCVE-2008-1753 · GHSA-4R3G-W24C-GPR6 org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameterCVE-2008-1510 · GHSA-4FG8-5HWC-WG5V org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameterCVE-2008-1301 · GHSA-XXJJ-JHGC-R68F org.opencms:opencms-core Maven Medium Fix reported
Alkacon Open CMS XSS via Logfile Viewer Settings functionCVE-2008-1300 · GHSA-W3V2-VFRJ-J9G8 org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jspCVE-2008-1045 · GHSA-V965-WWRQ-GXFG org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jspCVE-2006-3935 · GHSA-V3C3-QR6M-8M7M org.opencms:opencms-core Maven Medium Fix reported
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameterCVE-2006-3934 · GHSA-64HC-4JX3-62JP org.opencms:opencms-core Maven Medium Fix reported
Alkacon OpenCms XSS via query parameter in a search actionCVE-2006-2571 · GHSA-PMFX-P95X-CG4P org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCms XSS via unsanitized message bodyCVE-2006-3933 · GHSA-GJ9C-69CM-7C37 org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCms XSS via username during loginCVE-2005-4294 · GHSA-G4FC-J79Q-GJRH org.opencms:opencms-core Maven Low Fix reported
Alkacon OpenCMS CSV Injection via New User moduleCVE-2019-11819 · GHSA-Q693-V7QF-P4XJ org.opencms:opencms-core Maven High Fix reported
Alkacon OpenCMS stored cross-site scripting (XSS) vulnerabilityCVE-2024-41447 · GHSA-VQ95-6X79-QV8J org.opencms:opencms-core Maven Medium No fix reported