1694 matches found
The vulnerability of the XWiki platform lies in its inability to eliminate special elements, allowing attackers to execute arbitrary code.
The vulnerability of the XWiki platform lies in its inability to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the /xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration component of the XWiki platform, which is used for creating collaborative web applications. This vulnerability allows a perpetrator to elevate their privileges or execute arbitrary code.
The vulnerability of the /xwiki/bin/view/XWiki/Notifications/Code/LegacyNotificationAdministration component of the XWiki platform allows attackers to escalate their privileges or execute arbitrary code. This vulnerability exists because special elements are not being eliminated. Exploiting this...
The vulnerabilities of the components org.xwiki.platform:xwiki-platform-web and org.xwiki.platform:xwiki-platform-web-templates of the XWiki platform for creating collaborative web applications. XWiki allows attackers to execute arbitrary code.
The vulnerabilities of the components org.xwiki.platform:xwiki-platform-web and org.xwiki.platform:xwiki-platform-web-templates of the XWiki Platform allow attackers to execute arbitrary code. The XWiki Platform is vulnerable due to a lack of mechanisms for escaping output data. Exploiting these...
The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to execute arbitrary Groovy, Python, or Velocity code.
The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability allows a malicious actor to execute arbitrary Groovy, Python, or Velocity code remotely...
The vulnerability of the xwiki-platform-office-viewer component of the XWiki Platform, a platform for creating collaborative web applications. This component allows attackers to view the content of files on the hosting server.
The vulnerability of the xwiki-platform-office-viewer component of the XWiki Platform, a platform for creating collaborative web applications, relates to the disclosure of protected information. Exploiting this vulnerability could allow an attacker to remotely access and view the content of files...
The vulnerability of the XWiki Platform, related to improper code generation management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of protected information through the use of the section URL parameter...
The vulnerability of the software interface of the XWiki Platform for creating collaborative web applications, related to authentication errors, allows a perpetrator to gain user privileges as XWiki.superadmin.
The vulnerability of the software interface of the XWiki Platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain the privileges of the XWiki.superadmin user...
The vulnerability of the com.xwiki.identity-oauth:identity-oauth-ui package in the XWiki Platform. XWiki allows a perpetrator to carry out XSS attacks.
The vulnerability of the com.xwiki.identity-oauth:identity-oauth-ui package in the XWiki Platform involves a lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow an attacker to perform cross-site scripting XSS attacks remotely...
The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the unencrypted storage of critical information, which allows attackers to disclose protected data.
The vulnerability of the XWiki Platform lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose the protected data remotely...
The vulnerability of the application-collabora office package of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows an attacker to open arbitrary Office attachments during viewing or editing mode.
The vulnerability of the application-collabora office package of the XWiki Platform, a platform for creating collaborative web applications, is related to errors in the use of standard permissions. Exploiting this vulnerability allows a malicious actor to open arbitrary Office attachments during...
The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of access control mechanisms. This allows attackers to create new users.
The vulnerability of the XWiki Platform lies in its lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to create a new user remotely...
The vulnerability of the XWiki Platform, which exists due to the lack of measures to neutralize special elements, allows a violator to execute arbitrary Groovy, Python, or Velocity code.
The XWiki platform is vulnerable because special elements are not being eliminated from it. Exploiting this vulnerability allows a malicious actor to execute arbitrary Groovy, Python, or Velocity code remotely...
The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary JavaScript code.
The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...
The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, related to authentication errors, allows a malicious user to edit any document at will.
The vulnerability of the XWiki Platform relates to authentication errors. Exploiting this vulnerability allows a malicious actor to remotely edit any document they wish...
The vulnerability of the XWiki platform for creating collaborative web applications lies in the lack of protection for administrative data. This allows attackers to disclose information about users’ email addresses.
The vulnerability of the XWiki Platform lies in the lack of protection for user data. Exploiting this vulnerability could allow a malicious actor to obtain information about users’ email addresses remotely...
The vulnerability of the Scheduler Application component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows a perpetrator to execute arbitrary code.
The vulnerability of the Scheduler Application component in the XWiki platform for creating collaborative web applications exists due to the failure to address issues related to eliminating specific elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the user registration function of the XWiki Platform allows a perpetrator to execute arbitrary code.
The vulnerability of the user registration function of the XWiki Platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the component org.xwiki.platform:xwiki-platform-livetable-ui of the XWiki platform for creating collaborative web applications. The XWiki platform allows attackers to gain unauthorized access to protected information.
The vulnerability of the “org.xwiki.platform:xwiki-platform-livetable-ui” component of the XWiki platform involves the disclosure of information in an unauthorized manner. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the XWiki platform, a collaborative web application, lies in the insufficient verification of the authenticity of executed requests. This allows attackers to replace the displayed URLs with fake ones.
The vulnerability of the XWiki Platform lies in the insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a malicious actor to substitute the displayed URL with another one...
The vulnerability of the user interface for searching the platform that creates collaborative web applications – XWiki Platform. XWiki allows a perpetrator to execute arbitrary code.
The vulnerability of the user interface for searching the XWiki Platform, a platform for creating collaborative web applications, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...