Lucene search
PRIOn knowledge basePRION:CVE-2022-36095HistorySep 08, 2022 - 9:15 p.m.
Cross site request forgery (csrf)
2022-09-0821:15:00
PRIOn knowledge base
www.prio-n.com
xwiki
cross-site request forgery
csrf
security patch
document tags
XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Request Forgery (CSRF) attack for adding or removing tags on XWiki pages. The problem has been patched in XWiki 13.10.5 and 14.3. As a workaround, one may locally modify the documentTags.vm template in one’s filesystem, to apply the changes exposed there.
Related
nvd
nvd
CVE-2022-36095
2022-09-08 21:15:07
openvas
openvas
XWiki 2.0 < 13.10.5, 14.0 < 14.3 CSRF Vulnerability (GHSA-fxwr-4vq9-9vhj)
2022-09-15 00:00:00
cve
cve
CVE-2022-36095
2022-09-08 21:15:07
osv
osv
XWiki Cross-Site Request Forgery (CSRF) for actions on tags
2022-09-16 21:04:25
CVE-2022-36095
2022-09-08 21:15:07
cvelist
cvelist
CVE-2022-36095 XWiki Cross-Site Request Forgery (CSRF) for actions on tags
2022-09-08 20:20:13
github
github
XWiki Cross-Site Request Forgery (CSRF) for actions on tags
2022-09-16 21:04:25