Alkacon OpenCMS arbitrary file upload vulnerability

MÉDIO 6.1CVE-2023-37602 · GHSA-ghg2-3w9x-9599 · Published 20/07/2023 · updated 17/06/2026

Em resumo

CVE-2023-37602 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta org.opencms:opencms-core, opencms (alkacon).
Chance de exploração nos próximos 30 dias (EPSS): 0.62%, maior que 49.7% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
org.opencms:opencms-core Maven	`≤ 15.0`	No fix yet
opencms alkacon	`= 15.0.0`	No fix yet

Description

An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.

NVD description

An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.

References

nvd.nist.gov/vuln/detail/CVE-2023-37602 · ADVISORY
alkacon/opencms-core · PACKAGE
exploit-db.com/exploits/51564 · WEB

Mais vulnerabilidades de org.opencms:opencms-core

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.opencms:opencms-core

Maven

≤ 15.0

No fix yet

opencms

alkacon

= 15.0.0

No fix yet

Description

An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.

NVD description

An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers to execute arbitrary code via uploading a crafted PNG file.

Mais vulnerabilidades de org.opencms:opencms-core

Ver tudo →