Lucene search
PRIOn knowledge basePRION:CVE-2023-35166HistoryJun 20, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-06-2020:15:00
PRIOn knowledge base
www.prio-n.com
3
xwiki platform
logic flaw
tip ui extension
execution
patched
versions 15.1-rc-1
14.10.5
nvd
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It’s possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.
Related
cvelist
cvelist
CVE-2023-35166 Privilege escalation (PR) from account through TipsPanel
2023-06-20 19:29:51
cve
cve
CVE-2023-35166
2023-06-20 20:15:09
osv
osv
XWiki Platform vulnerable to privilege escalation (PR) from account through TipsPanel
2023-06-20 19:55:36
CVE-2023-35166
2023-06-20 20:15:09
github
github
openvas
openvas
nvd
nvd
CVE-2023-35166
2023-06-20 20:15:09