About Remote Code Execution – XWiki Platform (CVE-2024-31982) vulnerability

🗓️ 31 Oct 2024 11:50:35Reported by Alexander LeonovType

About Remote Code Execution - XWiki Platform (CVE-2024-31982) vulnerability. XWiki is a free open-source wiki platform. Vulnerability with CVSS Base Score 10 allows attackers to execute arbitrary code. Fixed in XWiki versions 14.10.20, 15.5.4 and 15.10RC1

Reporter	Title	Published	Views	Family All 18
GithubExploit	Exploit for Code Injection in Xwiki	22 Jun 202408:47	–	githubexploit
GithubExploit	Exploit for Code Injection in Xwiki	22 Jun 202417:04	–	githubexploit
GithubExploit	Exploit for Code Injection in Xwiki	22 Jun 202421:20	–	githubexploit
Information Security Automation	New episode “In The Trend of VM” (#9): 4 trending vulnerabilities of October, scandal at The Linux Foundation, social “attack on the complainer”, “Ford’s method” for motivating IT specialists to fix vulnerabilities	28 Nov 202412:57	–	avleonov
BDU FSTEC	The vulnerability of the DatabaseSearch function in the XWiki platform, a tool for creating collaborative web applications. This vulnerability allows attackers to execute arbitrary code.	1 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-31982	22 Jun 202421:25	–	circl
CNNVD	XWiki Platform 安全漏洞	10 Apr 202400:00	–	cnnvd
CVE	CVE-2024-31982	10 Apr 202419:38	–	cve
Cvelist	CVE-2024-31982 XWiki Platform: Remote code execution as guest via DatabaseSearch	10 Apr 202419:38	–	cvelist
Github Security Blog	XWiki Platform: Remote code execution as guest via DatabaseSearch	10 Apr 202417:12	–	github