org.opencms:opencms-core vulnerabilities (Maven)
31 vulnerabilities.
-
org.opencms:opencms-coreMaven Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host 7.5 High -
org.opencms:opencms-coreMaven Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp 6.1 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information 7.3 High -
org.opencms:opencms-coreMaven Alkacon OpenCms is vulnerable to XSS via cmis-online/type 6.1 Medium -
org.opencms:opencms-coreMaven OpenCMS Cross-Site Scripting vulnerability 6.5 Medium -
org.opencms:opencms-coreMaven OpenCMS cross-site scripting (XSS) vulnerability 5.4 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS stored cross-site scripting (XSS) vulnerability 5.4 Medium -
org.opencms:opencms-coreMaven Cross-Site Scripting stored in Alkacon OpenCMS 6.4 Medium -
org.opencms:opencms-coreMaven Cross-site Scripting in Alkacon Software OpenCms 5.4 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS arbitrary file upload vulnerability 6.1 Medium -
org.opencms:opencms-coreMaven alkacon-OpenCMS vulnerable to stored Cross-site Scripting 5.4 Medium -
org.opencms:opencms-coreMaven XML External Entity Reference in org.opencms:opencms-core 6.5 Medium -
org.opencms:opencms-coreMaven Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms 4.3 Medium -
org.opencms:opencms-coreMaven XSS issues in the management interface 6.1 Medium -
org.opencms:opencms-coreMaven XSS in login form 6.1 Medium -
org.opencms:opencms-coreMaven XSS in search engine 6.1 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS CSV Injection via New User module 7.8 High -
org.opencms:opencms-coreMaven Alkacon OpenCMS XSS via New User module 6.1 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters 4.3 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS XSS via title and requestedResource parameters 4.3 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp 4.3 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter 4.3 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter 4.0 Medium -
org.opencms:opencms-coreMaven Alkacon Open CMS XSS via Logfile Viewer Settings function 4.3 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp 4.3 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCms Exposes JSP Source Code 4.0 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp 6.5 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter 4.0 Medium -
org.opencms:opencms-coreMaven Alkacon OpenCms XSS via unsanitized message body 3.5 Low -
org.opencms:opencms-coreMaven Alkacon OpenCms XSS via query parameter in a search action 2.6 Low -
org.opencms:opencms-coreMaven Alkacon OpenCms XSS via username during login 4.3 Medium