Security Advisory

CVE-2023-42344

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-08 00:00:00
Last updated 2026-05-08 14:36:11
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.