CVE-2024-31981: Missing Authorization

🗓️ 10 Apr 2024 00:00:00Reported by Rapid7Type

XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, remote code execution is possible via PDF export templates. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 a...

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the PDFClassHandler component of the XWiki Platform, a platform for creating collaborative web applications. The XWiki Platform allows attackers to enhance their privileges.	9 Apr 202500:00	–	bdu_fstec
CNNVD	XWiki Platform 安全漏洞	10 Apr 202400:00	–	cnnvd
CVE	CVE-2024-31981	10 Apr 202419:22	–	cve
Cvelist	CVE-2024-31981 XWiki Platform: Privilege escalation (PR) from user registration through PDFClass	10 Apr 202419:22	–	cvelist
Github Security Blog	XWiki Platform: Privilege escalation (PR) from user registration through PDFClass	10 Apr 202417:11	–	github
NVD	CVE-2024-31981	10 Apr 202420:15	–	nvd
OpenVAS	XWiki 3.0.1 < 14.10.19, 15.0-rc-1 < 15.5.4, 15.6-rc-1 < 15.9 Privilege Escalation Vulnerability (GHSA-vxwr-wpjv-qjq7)	15 Apr 202400:00	–	openvas
OSV	GHSA-VXWR-WPJV-QJQ7 XWiki Platform: Privilege escalation (PR) from user registration through PDFClass	10 Apr 202417:11	–	osv
Positive Technologies	PT-2024-24333 · Xwiki · Xwiki Platform	21 Sep 202300:00	–	ptsecurity
RedhatCVE	CVE-2024-31981	23 May 202510:12	–	redhatcve