{"action":"Upgrade org.opencms:opencms-core to 10.5.1 or later.","affected":[{"fixed":"10.5.1","introduced":"0"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2023-42344"],"ecosystem":"Maven","epss":0.0234,"exploited":false,"fixed_versions":["10.5.1"],"ghsa_id":"GHSA-rcc6-6q2f-m2cw","id":"tcs_01M5N9BGVX25SFNTSQ2JZY1C3Y","modified_at":"2026-05-14T13:26:35.833104Z","published_at":"2026-05-08T06:32:37Z","references":["https://osv.dev/vulnerability/GHSA-rcc6-6q2f-m2cw","https://nvd.nist.gov/vuln/detail/CVE-2023-42344","https://github.com/projectdiscovery/nuclei-templates/issues/8864","https://github.com/alkacon/opencms-core","https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-rcc6-6q2f-m2cw","url":"https://osv.dev/vulnerability/GHSA-rcc6-6q2f-m2cw"}],"summary":"Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information"}