Lucene search
Velocity execution without script right through tree macro
Velocity script execution without script right through tree macro. Impact: Allows unauthorized execution of Velocity script through document tree, even without script right. Patches: XWiki 14.10.7 and 15.2RC1. Workarounds: Modify XWiki.DocumentTreeMacros. References: XWIKI-20625, github.com/xwiki/xwiki-platform/commit/41d7dca2d30084966ca6a7ee537f39ee8354a7e3
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | Code injection | 21 Dec 202320:15 | – | prion |
 | CVE-2023-50732 | 21 Dec 202320:15 | – | osv |
 | CVE-2023-50732 Velocity execution without script right through tree macro | 21 Dec 202319:42 | – | cvelist |
 | Velocity execution without script right through tree macro | 19 Dec 202321:39 | – | github |
 | CVE-2023-50732 | 21 Dec 202320:15 | – | nvd |
 | CVE-2023-50732 | 21 Dec 202320:15 | – | cve |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo19 Dec 2023 21:39Current
7.3High risk
Vulners AI Score7.3
CVSS36.3
EPSS0.001