CVE-2023-46242: Improper Control of Generation of Code

🗓️ 07 Nov 2023 00:00:00Reported by Rapid7Type

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execute a content with the right of any user via a crafted URL. A user must have programming privileges ...

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the XWiki platform for creating collaborative web applications lies in the insufficient verification of the authenticity of executed queries. This allows attackers to obtain the rights of the current user.	14 Feb 202400:00	–	bdu_fstec
CNNVD	XWiki Platform Code Injection Vulnerability	7 Nov 202300:00	–	cnnvd
CVE	CVE-2023-46242	7 Nov 202319:08	–	cve
Cvelist	CVE-2023-46242 Code injection in XWiki Platform	7 Nov 202319:08	–	cvelist
EUVD	EUVD-2023-2974	3 Oct 202520:07	–	euvd
Github Security Blog	XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token	7 Nov 202322:35	–	github
NVD	CVE-2023-46242	7 Nov 202319:15	–	nvd
OpenVAS	XWiki 1.0 < 14.10.7, 15.0 < 15.2 CSRF Vulnerability (GHSA-hgpw-6p4h-j6h5)	16 Nov 202300:00	–	openvas
OSV	GHSA-HGPW-6P4H-J6H5 XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token	7 Nov 202322:35	–	osv
Prion	Design/Logic Flaw	7 Nov 202319:15	–	prion