CVE-2023-42345Disclosure

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://labs.watchtowr.com/xxe-you-can-depend-on-me-opencms/

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-05-08); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVE@CVEnew150d
Disclosure
CVE-2023-42345 A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp. https://www.cve.org/CVERecord?id=CVE-2023-42345
Post summary
The text announces a Cross‑Site Scripting vulnerability (CVE‑2023‑42345) in Alkacon OpenCms before version 16, detailing the affected component updateModelGroups.jsp, but it does not provide a PoC, exploit code, active exploitation evidence, or patch information.
00000200
57.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds153d
Disclosure
CVE-2023-42345 Cross Site Scripting Vulnerability in Alkacon OpenCms Before Version 16 https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-42345
Post summary
The post only discloses CVE-2023-42345 as a cross‑site scripting flaw in Alkacon OpenCms versions before 16, with no PoC, exploit, active exploitation, patch, or false‑positive claim provided.
0000075
4.0K followersView on X

Explore more

Back to dashboard