Threats tagged 'ghsa-r362-p5vx-pj8p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2026-38429OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML Critical9.82026-05-05GCVE DatabaseCVE-2026-38429 OpenCMS version 20 and earlier contain a critical XML External Entity (XXE) vulnerability in the Admin Import DB feature. This flaw arises from insecure XML parsing of user-supplied .zip files that include a manifest.xml file. The vulnerability allows an unauthenticated attacker to exploit the XML parser, potentially leading to full confidentiality, integrity, and availability compromise of the affected system. Report on CVE-2026-38429 Vulnerability CWE-611 #ghsa-r362-p5vx-pj8p	GCVE Database	2026-05-05

Page 1 of 1