PT-2023-8616

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 14.10.7 XWiki Platform versions prior to 15.2RC1 Description The issue is related to authentication errors in the XWiki Platform, allowing a remote attacker to gain the rights of the XWiki.superadmin user. This...

CVE-2023-46244: Incorrect Authorization

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a user to write a script in which any velocity content is executed with the right of any other document content author. Since this API require programmin...