XWiki Platform 安全漏洞

Xwiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company Xwiki. A security vulnerability exists in XWiki Platform that stems from the fact that in the affected version, any user with editing privileges can copy the content of a page to which...

Xwiki Platform 跨站脚本漏洞

Xwiki Platform is a wiki platform for creating web collaboration applications from the French company Xwiki. XWiki Platform is vulnerable to a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output in registerinline, which could be...

CVE-2022-23618: URL Redirection to Untrusted Site

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is no protection against URL redirection to untrusted sites, in particular some well known parameters xredirect can be used to perform url redirections. This problem...

PT-2022-16136

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 12.10.11 XWiki Platform versions prior to 13.4.7 XWiki Platform versions prior to 13.10.3 XWiki Platform versions prior to 14.0-rc-1 Description The issue is related to a cross-site scripting XSS vector in the...

PT-2022-16132

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 12.10.9 XWiki Platform versions prior to 13.4.1 XWiki Platform versions prior to 13.6RC1 Description The issue allows an attacker to guess if a user has an account on the wiki by using the "Forgot your password...

XWiki Platform 路径遍历漏洞

Xwiki Platform is a set of French Xwiki company's Wiki platform for creating Web collaboration applications. XWiki Platform has a path traversal vulnerability, the vulnerability stems from the application fails to properly filter special elements in the resource or file path, an attacker can use...

Xwiki Platform 授权问题漏洞

Xwiki Platform is a wiki platform for creating web collaboration applications from the French company Xwiki. XWiki Platform is vulnerable to an authorization issue, which stems from the fact that even if the wiki is closed to visitors, it is possible to guess whether a user has an account on the...

PT-2022-16131

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 12.10.7 XWiki Platform versions prior to 13.3RC1 Description The XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions, there is no...

PT-2022-16129

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 13.1RC1 Description The issue allows an unprivileged user to perform a remote code execution by injecting a groovy script in her own profile and by calling the Reset password feature, as it performs a save of t...

CVE-2022-23617: Missing Authorization

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and...

CVE-2022-23621: Missing Authorization

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can read any file located in the XWiki WAR for example xwiki.cfg and xwiki.properties through XWikiinvokeServletAndReturnAsString as...

CVE-2022-23619: Exposure of Sensitive Information to an Unauthorized Actor

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been...

PT-2022-16130

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 12.10.6 XWiki Platform versions prior to 13.2CR1 Description The issue allows any user with edit rights to copy the content of a page they do not have access to by using it as a template for a new page. There a...

CVE-2022-23616: Improper Neutralization of Special Elements in Output Used by a Downstream Component

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for an unprivileged user to perform a remote code execution by injecting a groovy script in her own profile and by calling the Reset password feature since t...

CVE-2022-23622: Improper Neutralization of Input During Web Page Generation

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is a cross site scripting XSS vector in the registerinline.vm template related to the xredirect hidden field. This template is only used in the following conditions:...

XWiki Platform 安全漏洞

Xwiki Platform is a Wiki platform used to create Web collaboration applications from the French company Xwiki. XWiki Platform has an access control error vulnerability that stems from the application not properly restricting access to resources from unauthorized roles, which could be exploited by...

PT-2022-16134 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 13.6-rc-1 Description: The issue arises from the AbstractSxExportURLFactoryActionHandlerprocessSx function not properly escaping SSX document references when serializing them on the filesystem. This allows the...

CVE-2022-23615: Incorrect Authorization

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can save a document with the right of the current user which allow accessing API requiring programming right if the current user has programming...

XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform, which stems from the fact that in the affected version, any user with SCRIPT privileges can read any file located in an...

Xwiki Platform 注入漏洞

Xwiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company Xwiki. XWiki Platform suffers from an injection vulnerability that stems from an affected version in which its unprivileged users can execute remote code execution to inject a groovy...