CVE-2023-29522 Code injection from view right on XWiki.ClassSheet in xwiki-platform

🗓️ 18 Apr 2023 23:38:22Reported by GoogleType

osv

osv🔗 osv.dev👁 15 Views

XWiki Platform vulnerability with remote code execution patched in versions 14.4.8, 14.10.3, and 15.0RC

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the lack of measures to neutralize special elements within the platform, allowing attackers to execute arbitrary Groovy and Python code.	14 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-29522	19 Apr 202307:43	–	circl
CNNVD	XWiki Platform 注入漏洞	18 Apr 202300:00	–	cnnvd
CVE	CVE-2023-29522	18 Apr 202323:38	–	cve
Cvelist	CVE-2023-29522 Code injection from view right on XWiki.ClassSheet in xwiki-platform	18 Apr 202323:38	–	cvelist
EUVD	EUVD-2023-1356	3 Oct 202520:07	–	euvd
Github Security Blog	XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet	20 Apr 202322:15	–	github
NVD	CVE-2023-29522	19 Apr 202300:15	–	nvd
OpenVAS	XWiki 7.0-rc-1 < 14.4.8, 14.5 < 14.10.3 Code Injection Vulnerability (GHSA-mjw9-3f9f-jq2w)	24 Jul 202300:00	–	openvas
OSV	GHSA-MJW9-3F9F-JQ2W XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet	20 Apr 202322:15	–	osv

Source	Link
jira	www.jira.xwiki.org/browse/XWIKI-20456
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29522.json
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-mjw9-3f9f-jq2w
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-29522
github	www.github.com/xwiki/xwiki-platform/commit/d7e56185376641ee5d66477c6b2791ca8e85cfee

10 Apr 2026 04:57Current

8.9High risk

Vulners AI Score8.9

CVSS 3.19.9

EPSS0.36487

xwiki platform remote code execution vulnerability patch upgrade