CVE-2025-28099: Fumiao Opencms

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,

Affected products

• Fumiao Opencms: version 2.3 only

Published 2025-04-21. Last modified 2026-06-17.