Lucene search
GoogleOSV:GHSA-G6V7-VQHX-6V6CHistoryOct 12, 2021 - 5:23 p.m.
XML External Entity Reference in org.opencms:opencms-core
2021-10-1217:23:40
Google
osv.dev
15
xml external entity
xxe
opencms-core
alkacon opencms
remote authenticated users
edit privileges
exfiltrate files
crafted svg document
security vulnerability
file system
EPSS
0.001
Percentile
47.5%
An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server’s file system by uploading a crafted SVG document.
Related
github
github
XML External Entity Reference in org.opencms:opencms-core
2021-10-12 17:23:40
prion
prion
Xxe
2021-10-08 15:15:00
nvd
nvd
CVE-2021-3312
2021-10-08 15:15:09
cve
cve
CVE-2021-3312
2021-10-08 15:15:09
osv
osv
CVE-2021-3312
2021-10-08 15:15:09
cnvd
cnvd
Alkacon OpenCms XML External Entity Vulnerability
2021-10-11 00:00:00
cvelist
cvelist
CVE-2021-3312
2021-10-08 14:44:58