{"action":"Upgrade org.opencms:opencms-core to 6.2.2 or later.","affected":[{"fixed":"6.2.2","introduced":"0"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2006-3935"],"ecosystem":"Maven","epss":0.01846,"exploited":false,"fixed_versions":["6.2.2"],"ghsa_id":"GHSA-v3c3-qr6m-8m7m","id":"tcs_01M5N9D1GZM3BTJGERAGH1963Y","modified_at":"2025-06-20T16:29:48.832158Z","published_at":"2022-05-01T07:13:46Z","references":["https://osv.dev/vulnerability/GHSA-v3c3-qr6m-8m7m","https://nvd.nist.gov/vuln/detail/CVE-2006-3935","https://github.com/alkacon/opencms-core/commit/8f1c04c5a16fe8d0bdbd13b65bf2a7b5cf100ff9","https://exchange.xforce.ibmcloud.com/vulnerabilities/27996","https://exchange.xforce.ibmcloud.com/vulnerabilities/28003","https://exchange.xforce.ibmcloud.com/vulnerabilities/28010","https://exchange.xforce.ibmcloud.com/vulnerabilities/28026","https://exchange.xforce.ibmcloud.com/vulnerabilities/28031","https://exchange.xforce.ibmcloud.com/vulnerabilities/28036","https://github.com/alkacon/opencms-core","http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v3c3-qr6m-8m7m","url":"https://osv.dev/vulnerability/GHSA-v3c3-qr6m-8m7m"}],"summary":"Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp"}