6612 matches found
org.xwiki.commons:xwiki-commons-diff-script (>=14.5, <=14.6), org.xwiki.commons:xwiki-commons-diff-xml (>=14.5, <=14.6) +22 more potentially affected by CVE-2023-26055 via org.xwiki.commons:xwiki-commons-xml (>=14.5, <=14.6)
org.xwiki.commons:xwiki-commons-xml MAVEN version =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.6 and more Source cves: CVE-2023-26055 Source advisory: OSV:GHSA-8CW6-4R32-6R3H...
org.wikbook:wikbook.maven (>=0.9.33, <=0.9.45), org.wikbook:wikbook.xwiki (>=0.9.33, <=0.9.45) +57 more potentially affected by CVE-2023-26055 via org.xwiki.commons:xwiki-commons-xml (>=3.2-milestone-3, <=13.10.8)
org.xwiki.commons:xwiki-commons-xml MAVEN version =3.2-milestone-3, =0.9.33, =0.9.33, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =3.2-milestone-3, =3.2-milestone-3, =4.1-milestone-1, =3.2-milestone-3, =3.2-milestone-3, =4.2-milestone-3, =4.1-milestone-2,...
CVE-2023-26055
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
Code injection
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
CVE-2023-26055
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
CVE-2023-26055 XWiki Commons may allow privilege escalation to programming rights via user's first name
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
org.wikbook:wikbook.maven (>=0.9.33, <=0.9.45), org.wikbook:wikbook.xwiki (>=0.9.33, <=0.9.45) +57 more potentially affected by CVE-2023-26055 via org.xwiki.commons:xwiki-commons-xml (>=3.2-milestone-3, <=13.10.8)
org.xwiki.commons:xwiki-commons-xml MAVEN version =3.2-milestone-3, =0.9.33, =0.9.33, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =3.2-milestone-3, =3.2-milestone-3, =4.1-milestone-1, =3.2-milestone-3, =3.2-milestone-3, =4.2-milestone-3, =4.1-milestone-2,...
org.xwiki.commons:xwiki-commons-diff-script (>=14.0-rc-1, <=14.4.3), org.xwiki.commons:xwiki-commons-diff-xml (>=14.0-rc-1, <=14.4.3) +22 more potentially affected by CVE-2023-26055 via org.xwiki.commons:xwiki-commons-xml (>=14.0-rc-1, <=14.4.3)
org.xwiki.commons:xwiki-commons-xml MAVEN version =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.4.3 and more Source cves: CVE-2023-26055 Source...
org.xwiki.commons:xwiki-commons-diff-script (>=14.5, <=14.6), org.xwiki.commons:xwiki-commons-diff-xml (>=14.5, <=14.6) +22 more potentially affected by CVE-2023-26055 via org.xwiki.commons:xwiki-commons-xml (>=14.5, <=14.6)
org.xwiki.commons:xwiki-commons-xml MAVEN version =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.6 and more Source cves: CVE-2023-26055 Source advisory: MEND:CVE-2023-26055...
CVE-2023-26055 XWiki Commons may allow privilege escalation to programming rights via user's first name
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
CVE-2023-26055
CVE-2023-26055 affects XWiki Commons. Starting with version 3.1-milestone-1, any user can edit their own profile and inject code that runs with programming privileges; the vulnerability also appears in other short text fields displayed in Apps Within Minutes. The issue has been patched in version...
CVE-2023-26055 XWiki Commons may allow privilege escalation to programming rights via user's first name
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
CVE-2023-26055: Improper Neutralization of Escape, Meta, or Control Sequences
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
XWiki Commons Security Vulnerabilities
XWiki Commons is a technology library shared by several other top XWiki projects. A security vulnerability exists in XWiki Commons, which stems from the fact that any user can edit their own configuration file and inject code that will be executed with programmatic privileges...
Malicious Package
Overview smart-commons is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Malicious Package
Overview spectra-ui-commons is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...
PT-2023-20455 · Xwiki · Xwiki Commons
Name of the Vulnerable Software and Affected Versions: XWiki Commons versions 3.1-milestone-1 through 13.10.8 XWiki Commons versions 14.0.0 through 14.4.3 XWiki Commons versions 14.5.0 through 14.7RC0 Description: The issue allows any user to edit their own profile and inject code, which is...
Important: Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update
Migration Toolkit for Applications 6.0.1 release Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
