XXE, You Can Depend On Me (OpenCMS CVE-2023-42344 and Friends)
In the idealistic world of security research, we’d be faced with the latest versions of off-the-shelf enterprise products, primed with fresh hardened code ready for analysis and code kung-fu.
In reality, however, enterprises and users often don’t update their installations unless world-ending, impactful security flaws are demonstrated or