S4E just found a high top 10 tcp port service scan
high·Product Based Web Vulnerabilities·Updated Feb 26, 2024

CVE-2023-42344 Scanner

Targets XML parsing endpoints in OpenCMS versions before 10.5.1, allowing attackers to read server files or perform SSRF.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.3k
Times Used
continuous scan runs
3.4k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2023-42344
7.3
CVSShigh
Exploitable remotely over the internet · no authentication required.

Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
n/aby n/a
n/a
Updated Aug 22, 2026View on NVD →
Detail

OpenCMS is a professional, open-source content management system widely used by enterprises and organizations to manage and publish web content. It provides a robust platform for creating, editing, and managing websites, with features like workflow management, template engines, and multi-language support. System administrators and developers rely on OpenCMS for its flexibility and scalability in handling complex content structures.

XML External Entity (XXE) vulnerability in OpenCMS arises when the application processes XML input from untrusted sources without proper validation. This flaw occurs because the XML parser is configured to resolve external entities, allowing attackers to inject malicious XML content. The vulnerability is rooted in the failure to disable external entity processing in the underlying XML library, making it a classic XXE issue.

Specifically, the vulnerability affects the XML parsing functionality in OpenCMS versions prior to 10.5.1. Attackers can exploit this by sending crafted XML payloads to endpoints that handle XML data, such as import or export functions. The vulnerable parameter is typically the XML body itself, where external entities can be defined and referenced to access local files or internal resources.

If exploited, this XXE vulnerability can lead to severe consequences, including unauthorized access to sensitive files like configuration files or user data, server-side request forgery (SSRF) enabling attacks on internal systems, and potential denial of service. The CVSS score of 8.2 highlights the high risk, as attackers can compromise the confidentiality and integrity of the OpenCMS server and its data.

Solution Advice
  • Upgrade OpenCMS to version 10.5.1 or later to patch the XXE vulnerability.
  • Disable external entity processing in the XML parser configuration for all XML handling endpoints.
  • Implement input validation and sanitization for all XML data received from untrusted sources.
  • Restrict access to vulnerable API endpoints using network segmentation and firewall rules.
  • Apply the principle of least privilege to the OpenCMS application user to limit file system access.
  • Enable logging and monitoring for XML parsing activities to detect suspicious patterns.
  • Conduct regular security scans using S4E to identify and remediate similar vulnerabilities.
  • Review and update XML processing libraries to ensure they are configured securely.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

OpenCMS XXE Scanner | S4E Free Check S4E