CVE-2023-49733

Summary

CVE-2023-49733 is an Improper Restriction of XML External Entity Reference vulnerability affecting Apache Cocoon versions 2.2.0 to 2.2.9. This issue allows an attacker to potentially inject malicious code or access sensitive information by exploiting the improper restriction of XML Entity references. Users are strongly advised to upgrade to Apache Cocoon version 2.3.0 to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.