CVE-2023-49733 (published 2023-11-30T11:29:35.188Z)
Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0.

Users are recommended to upgrade to version 2.3.0, which fixes the issue.


Affected products: Vendor: Apache Software Foundation
Product: Apache Cocoon
Versions: 2.2.0