Privilege escalation (PR)/RCE from account through class sheet

Impact It's possible for a user to execute anything with the right of the author of the XWiki.ClassSheet document. Steps to Reproduce: 1. Edit your user profile with the object editor and add an object of type DocumentSheetBinding with value Default Class Sheet 1. Edit your user profile with the...

PT-2023-8605

Name of the Vulnerable Software and Affected Versions XWiki Platform versions 3.3-milestone-2 through 14.10.3 XWiki Platform versions prior to 15.0-rc-1 Description The issue is related to authorization errors in the XWiki Platform, allowing a remote attacker to elevate their privileges. A user c...