CO
Product
Cocoon
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 0Low 0
Watch
Add Cocoon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-49733 | 9.8 | Nov 30 | Apache Cocoon's StreamGenerator is vulnerable to XXE injection Affected: 2.2.0 before 2.3.0 |
| CVE-2022-45135 | 9.8 | Nov 30 | Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction Affected: 2.2.0 before 2.3.0 |
Showing 2