CVE-2023-35150

creationtimestamp| type| source ---|---|--- 2023-08-28 05:23:38+00:00| published-proof-of-concept| https://t.me/CNArsenal/950 2023-08-28 11:01:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8928...

CVE-2023-35150 XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to versions 14.4.8, 14.10.4, and 15.0, any user with view rights on any document can execute code with programming rights, leading to remote code executio...

CVE-2023-35150

XWiki Platform vulnerability CVE-2023-35150 allows a user with view rights on any document to execute code with programming rights, enabling remote code execution through a crafted URL payload. Affected versions are 2.40m-2 and prior to 14.4.8, 14.10.4, and 15.0. Patches exist in XWiki 14.4.8, 14...