GitHub Advisoryadvisory · Maven

GHSA-c5vw-342h-x5rx Alkacon OpenCms Exposes JSP Source Code

MEDIUM Published 2022-05-01 Modified 2024-02-12 Official page ↗
Aliases
CVE-2006-3936
Ecosystem
Maven
Packages
org.opencms:opencms-core
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2024-02-12

Affected packages

• Maven org.opencms:opencms-core: < 6.2.2 → fixed in 6.2.2

Description

`system/workplace/editors/editor.jsp` in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using `index.jsp`.

Related

Alias · CVE (1)

  • CVE-2006-3936 system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References