{"action":"Upgrade org.opencms:opencms-core to 16.0.0 or later.","affected":[{"fixed":"16.0.0","introduced":"14.0.0"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2023-6379"],"ecosystem":"Maven","epss":0.01752,"exploited":false,"fixed_versions":["16.0.0"],"ghsa_id":"GHSA-w62v-q77r-66cc","id":"tcs_01M5N9FPBZTJMXBGE82DX328E0","modified_at":"2025-06-20T16:29:49.541186Z","published_at":"2023-12-13T12:30:43Z","references":["https://osv.dev/vulnerability/GHSA-w62v-q77r-66cc","https://nvd.nist.gov/vuln/detail/CVE-2023-6379","https://github.com/alkacon/opencms-core/commit/d965c18ac6d24ad75bfea272edb8b2efd4290afa","https://github.com/alkacon/opencms-core","https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alkacon-software-opencms"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-w62v-q77r-66cc","url":"https://osv.dev/vulnerability/GHSA-w62v-q77r-66cc"}],"summary":"Alkacon OpenCMS XSS via Mercury template"}