VYPR
← All advisories
High severity7.5NVD Advisory· Published May 8, 2026· Updated May 11, 2026

CVE-2023-42346

CVE-2023-42346

Description

Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.opencms:opencms-coreMaven
< 16.016.0

Affected products

1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.

CVE-2023-42346 · High · VYPR