Lucene search
CVE-2023-26473
XWiki Platform allows arbitrary database select by users with edit rights, fixed in versions 13.10.11, 14.4.7, 14.1
Show more
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2023-26473 | 2 Mar 202319:15 | – | osv |
| GHSA-VPX4-7RFP-H545 Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm | 3 Mar 202322:46 | – | osv |
 | Design/Logic Flaw | 2 Mar 202319:15 | – | prion |
 | CVE-2023-26473 XWiki Platform allows unprivileged users to make arbitrary select queries using DatabaseListProperty and suggest.vm | 2 Mar 202318:17 | – | cvelist |
 | CVE-2023-26473 | 2 Mar 202319:15 | – | cve |
 | XWiki 1.3-rc-1 < 13.10.11, 14.x < 14.4.7, 14.5.x < 14.10 Improper Access Control Vulnerability (GHSA-vpx4-7rfp-h545) | 6 Mar 202300:00 | – | openvas |
 | CVE-2023-26473 XWiki Platform allows unprivileged users to make arbitrary select queries using DatabaseListProperty and suggest.vm | 2 Mar 202318:17 | – | vulnrichment |
 | Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm | 3 Mar 202322:46 | – | github |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo02 Mar 2023 19:15Current
6.7Medium risk
Vulners AI Score6.7
CVSS36.5
EPSS0.00119