CVE-2023-38693
1 advisory.
Maven/org.lucee:lucee CVE-2023-38693: critical 10
Lucee RCE/XXE Vulnerability
Action: Upgrade org.lucee:lucee to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.10.79-RC | 5.3.12.1 | - |
| 5.4.0.65-RC | 5.4.3.2 | - |
| 0 | - | 5.3.7.59 |
| 5.3.8.132-RC | 5.3.8.236 | - |
| 5.3.9.113 | 5.3.9.173 | - |
Fixed versions
| 5.3.12.1 | 5.4.3.2 | 5.3.8.236 | 5.3.9.173 |
Sources
- osv: GHSA-vwjx-mmwm-pwrf
- https://github.com/lucee/Lucee/security/advisories/GHSA-vwjx-mmwm-pwrf
- https://nvd.nist.gov/vuln/detail/CVE-2023-38693
- https://github.com/lucee/Lucee
CVE-2023-38693 · published · modified · JSON