Lucene search
China National Vulnerability DatabaseCNVD-2021-103408HistoryOct 11, 2021 - 12:00 a.m.
Alkacon OpenCms XML External Entity Vulnerability
2021-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
alkacon opencms
vulnerability
xml
file theft
exploit
svg
EPSS
0.001
Percentile
47.5%
Alkacon OpenCms is an open source content management system (CMS) developed in Java.Alkacon OpenCms is vulnerable to an XML external entity vulnerability that can be exploited by attackers to steal files from the server’s file system by uploading crafted SVG documents.
Related
github
github
XML External Entity Reference in org.opencms:opencms-core
2021-10-12 17:23:40
osv
osv
XML External Entity Reference in org.opencms:opencms-core
2021-10-12 17:23:40
CVE-2021-3312
2021-10-08 15:15:09
prion
prion
Xxe
2021-10-08 15:15:00
nvd
nvd
CVE-2021-3312
2021-10-08 15:15:09
cve
cve
CVE-2021-3312
2021-10-08 15:15:09
cvelist
cvelist
CVE-2021-3312
2021-10-08 14:44:58