Lucene search

CVE-2022-41934

🗓️ 23 Nov 2022 20:10:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 59 Views

XWiki Platform allows arbitrary code execution via menu macro, patched in XWiki 14.6RC1, 13.10.8, 14.4.3

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
RedhatCVE	CVE-2022-41934	5 Feb 202523:49	–	redhatcve
Prion	Design/Logic Flaw	23 Nov 202220:15	–	prion
OSV	CVE-2022-41934	23 Nov 202220:15	–	osv
OSV	GHSA-6W8H-26XX-CF8Q Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-ui	21 Nov 202222:37	–	osv
Vulnrichment	CVE-2022-41934 Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-menu-ui	23 Nov 202200:00	–	vulnrichment
Cvelist	CVE-2022-41934 Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-menu-ui	23 Nov 202200:00	–	cvelist
Github Security Blog	Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-menu-ui	21 Nov 202222:37	–	github
CNVD	XWiki Platform Code Injection Vulnerability	25 Nov 202200:00	–	cnvd
NVD	CVE-2022-41934	23 Nov 202220:15	–	nvd
OpenVAS	XWiki < 13.10.8, 14.x < 14.4.3, 14.5.x < 14.6-rc-1 Eval Injection Vulnerability (GHSA-6w8h-26xx-cf8q)	24 Nov 202200:00	–	openvas

Nvd

Vulners

Node

xwiki xwikiRange<13.10.8

xwiki xwikiRange14.0.0–14.4.3

xwiki xwikiMatch14.4.4

xwiki xwikiMatch14.4.5

[
  {
    "vendor": "xwiki",
    "product": "xwiki-platform",
    "versions": [
      {
        "version": "< 13.10.8",
        "status": "affected"
      },
      {
        "version": ">= 14.0.0, < 14.4.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-6w8h-26xx-cf8q
github	www.github.com/xwiki/xwiki-platform/commit/59ccca24a8465a19f40c51d65fcc2c09c1edea16
github	www.github.com/xwiki/xwiki-platform/commit/2fc20891e6c6b0ca05ee07e315e7f435e8919f8d
jira	www.jira.xwiki.org/browse/XWIKI-19857
xwiki	www.xwiki.org/xwiki/bin/view/Documentation/UserGuide/Features/Imports

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Nov 2022 20:15Current

9.2High risk

Vulners AI Score9.2

CVSS38.8 - 9.9

EPSS0.02387

SSVC