CVE-2023-49733: Apache Cocoon's StreamGenerator is vulnerable to XXE injection

[Cédric Damioli <cdamioli () apache org>]

Severity: important

Affected versions:

- Apache Cocoon 2.2.0 before 2.3.0

Description:

Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: 
from 2.2.0 before 2.3.0.

Users are recommended to upgrade to version 2.3.0, which fixes the issue.

References:

https://cocoon.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-49733