XWiki LegacyNotificationAdministration Privilege Escalation

The vulnerability of the /xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration component of the XWiki platform allows attackers to escalate their privileges or execute arbitrary code. This vulnerability exists because special elements are not being eliminated. Exploiting this...

CVE-2023-29525

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the since parameter of the /xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration endpoint. This provides an XWik...

XWiki Platform Injection Vulnerability

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from XWiki France. XWiki Platform suffers from an injection vulnerability that originates in the since parameter of /xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration that allows code...

CVE-2023-29525: Improper Neutralization of Special Elements in Output Used by a Downstream Component

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the since parameter of the /xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration endpoint. This provides an XWik...