Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-37602

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-ghg2-3w9x-9599

Alkacon OpenCMS arbitrary file upload vulnerability An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.

gitlab/maven/org.opencms/opencms-core/CVE-2023-37602

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.