{"id":"CVE-2023-42346","aliases":[],"url":"https://o3.security/vulnerability/CVE-2023-42346","summary":"Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.","details":"Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.","published":"2026-05-08T00:00:00.000Z","modified":"2026-05-11T18:47:44.516Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"epss":{"score":0.00232,"percentile":0.1406,"asOf":"2026-08-09"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-05-11T18:47:44.516Z"}}