Lucene search
CVE-2023-50721
XWiki Platform allows injection of XWiki syntax and script macros, leading to remote code execution in versions before 14.10.15, 15.5.2, and 15.7-rc-1
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | GHSA-7654-VFH6-RW6X Remote code execution from account through SearchAdmin | 16 Dec 202300:35 | – | osv |
| CVE-2023-50721 | 15 Dec 202319:15 | – | osv |
 | CVE-2023-50721 | 15 Dec 202319:15 | – | nvd |
 | CVE-2023-50721 XWiki Platform RCE from account through SearchAdmin | 15 Dec 202319:02 | – | cvelist |
 | Remote code execution from account through SearchAdmin | 16 Dec 202300:35 | – | github |
 | Remote code execution | 15 Dec 202319:15 | – | prion |
[
{
"vendor": "xwiki",
"product": "xwiki-platform",
"versions": [
{
"version": ">= 4.5-rc-1, < 14.10.15",
"status": "affected"
},
{
"version": ">= 15.0-rc-1, < 15.5.2",
"status": "affected"
},
{
"version": ">= 15.6-rc-1, < 15.7-rc-1",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo15 Dec 2023 19:15Current
9.6High risk
Vulners AI Score9.6
CVSS38.8 - 9.9
EPSS0.38441