CVE-2023-49733: Apache Cocoon's StreamGenerator is vulnerable to XXE injection

Cédric Damioli <[email protected]> Thu, 30 Nov 2023 11:16:38 +0000

Newsgroups	gmane.text.xml.cocoon.user
Message-ID	<[email protected]>

Severity: important

Affected versions:

- Apache Cocoon 2.2.0 before 2.3.0

Description:

Improper Restriction of XML External Entity Reference vulnerability in =
Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0.

Users are recommended to upgrade to version 2.3.0, which fixes the issue.

References:

https://cocoon.apache.org/
https://www.cve.org/CVERecord?id=3DCVE-2023-49733