XWiki < 14.10.12, 15.0-rc-1 < 15.5 Multiple Vulnerabilities

Xwiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

CVE-2023-45137

creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:29+00:00| seen| https://t.me/cibsecurity/72918...

CVE-2023-45137

CVE-2023-45137 affects XWiki Platform: vulnerable are the web components enshrined in the platform-web and web-templates modules. The root cause is missing escaping in the error-message shown when creating a document that already exists, allowing raw HTML injection (XSS) via the document referenc...