From cee7822c6e5a6c2414e0cba6649dceb0bee5336f Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Thu, 22 Feb 2024 13:09:01 +0530 Subject: [PATCH 1/2] Update CVE-2023-42344.yaml --- http/cves/2023/CVE-2023-42344.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/http/cves/2023/CVE-2023-42344.yaml b/http/cves/2023/CVE-2023-42344.yaml index 9bd5f19a26..5191e190d3 100644 --- a/http/cves/2023/CVE-2023-42344.yaml +++ b/http/cves/2023/CVE-2023-42344.yaml @@ -2,7 +2,7 @@ id: CVE-2023-42344 info: name: OpenCMS - Unauthenticated XXE - author: x0xr2r + author: 0xr2r severity: high description: | users can execute code without authentication. An attacker can execute malicious requests on the OpenCms server. When the requests are successful vulnerable OpenCms can be exploited resulting in an unauthenticated XXE vulnerability. Based on research OpenCMS versions from 9.0.0 to 10.5.0 are vulnerable. @@ -36,4 +36,4 @@ http: - "root:.*:0:0:" - "invalidArgument" condition: and -# digest: 490a0046304402207109561f9ee225ddc24e0e2428763262bbd09665f2d2e30980f46c87af7476fd02206d213db222bf432261211cadb7e9cdc0f4431ad34f41a444becca4917fa9d2ec:922c64590222798bb761d5b6d8e72950 \ No newline at end of file +# digest: 490a0046304402207109561f9ee225ddc24e0e2428763262bbd09665f2d2e30980f46c87af7476fd02206d213db222bf432261211cadb7e9cdc0f4431ad34f41a444becca4917fa9d2ec:922c64590222798bb761d5b6d8e72950 From 2123c19bcb7b6055d6c5e9b4c87ae23144dd0ed9 Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Thu, 22 Feb 2024 13:10:25 +0530 Subject: [PATCH 2/2] Update CVE-2023-42344.yaml --- http/cves/2023/CVE-2023-42344.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/http/cves/2023/CVE-2023-42344.yaml b/http/cves/2023/CVE-2023-42344.yaml index 5191e190d3..4dca81eaee 100644 --- a/http/cves/2023/CVE-2023-42344.yaml +++ b/http/cves/2023/CVE-2023-42344.yaml @@ -1,7 +1,7 @@ id: CVE-2023-42344 info: - name: OpenCMS - Unauthenticated XXE + name: OpenCMS - XML external entity (XXE) author: 0xr2r severity: high description: |