Lucene search
+L

1 matches found

OSV
OSV
added 2023/10/25 9:7 p.m.4 views

GHSA-35J5-M29R-XFQ5 XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

Impact The footnote macro executed its content in a potentially different context than the one in which it was defined. In particular in combination with the include macro, this allows privilege escalation from a simple user account in XWiki to programming rights and thus remote code execution,...

8.8CVSS6AI score0.01247EPSS
SaveExploits1References5
Rows per page
Query Builder