{"id":"CVE-2023-49733","aliases":[],"url":"https://o3.security/vulnerability/CVE-2023-49733","summary":"Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0.\n\nUsers are recommended to upgrade to…","details":"Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0.\n\nUsers are recommended to upgrade to version 2.3.0, which fixes the issue.","published":"2023-11-30T12:15:09.963","modified":"2026-06-17T06:36:21.350","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2023/11/30/5"},{"type":"ADVISORY","url":"https://lists.apache.org/thread/t87nntzt6dxw354zbqr9k7l7o1x8gq11"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2023/11/30/5"},{"type":"ADVISORY","url":"https://lists.apache.org/thread/t87nntzt6dxw354zbqr9k7l7o1x8gq11"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T06:36:21.350"}}