Approved changes feed: RSS · Atom

cpe:2.3:a:opencrx:opencrx:5.2.2:*:*:*:*:*:*:*

part: a version: 5.2.2 update: *

VendorOpencrx (305f0539-9aaa-567c-ad00-8a1cea593a3b)
ProductOpencrx (20b07a8b-a490-5d36-947e-46c6ddca479b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/opencrx/opencrx purl2cpe 2026-06-01 10:14:01.829849
pkg:maven/org.opencrx/opencrx-core purl2cpe 2026-06-01 10:14:01.829851
pkg:sourceforge/opencrx purl2cpe 2026-06-01 10:14:01.829852

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46502 vulnerable 2026-06-08 06:12:45.261994 Details available
An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory.
Published: 2023-10-30T00:00:00.000Z
Updated: 2024-09-09T20:14:16.484Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.