Vulnerabilities > CVE-2021-3312 - XXE vulnerability in Alkacon Opencms 11.0/11.0.1/11.0.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server's file system by uploading a crafted SVG document.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |