References https://nvd.nist.gov/vuln/detail/CVE-2025-3317 https://www.knowsafe.com/ti/info/0/995154 https://avd.aliyun.com/detail?id=AVD-2025-28099 https://cert.kenet.or.ke/cve-2025-3317-fumiao-opencms-path-traversal-vulnerability https://nvd.nist.gov/vuln/detail/CVE-2008-1301 https://advisories.gitlab.com/maven/org.opencms/opencms-core/CVE-2008-1301/ https://www.cvedetails.com/product/179388/Fumiao-Opencms.html?vendor_id=37371 https://github.com/advisories/GHSA-xxjj-jhgc-r68f https://www.cnvd.org.cn/flaw/flawListByManu/55085 https://avd.aliyun.com/detail?id=AVD-2019-13237
Related VulnerabilitiesPoCCVE-2023-42343: OpenCMS - Cross-Site ScriptingPoCCVE-2023-42344: OpenCMS - XML external entity (XXE)PoCCVE-2023-6379: OpenCMS 14 & 15 - Cross Site ScriptingPoCCVE-2023-6380: OpenCms 14 & 15 - Open RedirectOpenCms XML外部实体注入(CVE-2023-42344)OpenCms 存在重定向漏洞