XWiki 13.x < 13.10.11, 14.x < 14.4.7, 14.5.x < 14.10 Privilege Escalation Vulnerability (GHSA-3738-p9x3-mv9r)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

CVE-2023-26474

creationtimestamp| type| source ---|---|--- 2023-03-02 22:34:31+00:00| seen| https://t.me/cibsecurity/59332 2025-03-05 21:34:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6621...

CVE-2023-26474

XWiki Platform vulnerability (CVE-2023-26474): Starting with version 13.10, a user with the rights of an existing document content author can execute a text area property via wiki syntax, enabling privilege escalation. The underlying root cause is an unintended execution path for text area proper...