Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/20 12:00 a.m.•1 views

CVE-2023-48292: Cross-Site Request Forgery (CSRF)

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacker to execute arbitrary shell commands ...

9.6CVSS7.4AI score0.22938EPSS
SaveExploits2References2
Rows per page
Query Builder