What is GHSA-c5vw-342h-x5rx?

GHSA-c5vw-342h-x5rx is a security advisory published by GitHub Security Advisories with Medium severity. Alkacon OpenCms Exposes JSP Source Code

Which CVE IDs does GHSA-c5vw-342h-x5rx cover?

GHSA-c5vw-342h-x5rx covers the following CVE IDs: CVE-2006-3936. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-c5vw-342h-x5rx?

GHSA-c5vw-342h-x5rx affects 1 product, including: maven/org.opencms:opencms-core:\u003c 6.2.2.

GHSA-c5vw-342h-x5rxMedium

Alkacon OpenCms Exposes JSP Source Code

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

February 12, 2024

🔗 CVE IDs covered (1)

CVE-2006-3936 →

📋 Description

system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.

🎯 Affected products1

maven/org.opencms:opencms-core:< 6.2.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2006-3936
https://exchange.xforce.ibmcloud.com/vulnerabilities/28001
http://www.opencms.org/opencms/en/shownews.html?id=1002
https://web.archive.org/web/20061014175017/http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt
https://web.archive.org/web/20201208142708/http://www.securityfocus.com/archive/1/441182/100/0/threaded
https://github.com/advisories/GHSA-c5vw-342h-x5rx