Description

Apache Solr component in Apache Chemistry in OpenCms has an XXE vulnerability. This vulnerability allows an attacker to send crafted requests to a web application for extraction of secrets from the file system, server-side request forgery, or denial-of-service attacks.

Remediation

Upgrade to the latest version of OpenCms

References

XXE, You Can Depend On Me

Related Vulnerabilities

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0113)

Oracle Database Server Other Vulnerability (CVE-2005-3641)

MySQL CVE-2013-3804 Vulnerability (CVE-2013-3804)

OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2022-1434)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-13760)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Tags

XXE Acumonitor Known Vulnerabilities CWE-611 CVE-2023-42346