Maven/org.opencms:opencms-core CVE-2024-5520: medium 6.4, EPSS 0.28%
OpenCMS Cross-Site Scripting vulnerability
Action: Upgrade org.opencms:opencms-core to 17.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 16.0 | 17.0 | - |
Fixed versions
| 17.0 |
Sources
- osv: GHSA-vg6x-pchq-98mg
- https://nvd.nist.gov/vuln/detail/CVE-2024-5520
- https://github.com/alkacon/opencms-core/commit/b05a5aca0f2b03042ddf2b2bb45fe2243a4084a7
- https://github.com/alkacon/opencms-core
- https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-stored-alkacon-opencms
CVE-2024-5520 · published · modified · JSON