Loading market data...
← Back to CVE feed

CVE-2023-42346

UNKNOWN View on NVD ↗

Description

Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.

References

Published: May 08, 2026 05:16 UTC Modified: May 08, 2026 15:58 UTC