Lucene search
PRIOn knowledge basePRION:CVE-2023-32069HistoryMay 09, 2023 - 4:15 p.m.
Design/Logic Flaw
2023-05-0916:15:00
PRIOn knowledge base
www.prio-n.com
6
xwiki
platform
logic flaw
unauthorized
code execution
version 3.3
versions 14.10.4
version 15.0-rc-1
nvd
XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it’s possible for a user to execute anything with the right of the author of the XWiki.ClassSheet document. This has been patched in XWiki 15.0-rc-1 and 14.10.4. There are no known workarounds.
Related
github
github
Privilege escalation (PR)/RCE from account through class sheet
2023-05-11 20:36:59
cvelist
cvelist
nvd
nvd
CVE-2023-32069
2023-05-09 16:15:15
cve
cve
CVE-2023-32069
2023-05-09 16:15:15
osv
osv
Privilege escalation (PR)/RCE from account through class sheet
2023-05-11 20:36:59
CVE-2023-32069
2023-05-09 16:15:15
openvas
openvas