CVE-2021-3137

CVE-2021-3137 affects XWiki 12.10.2, enabling XSS via an SVG document uploaded to the comment feature. Root cause: insecure handling of SVG uploads leading to script injection. Impact: cross-site scripting in affected deployments. Mitigation: vendor fix (VendorFix) referenced by OpenVAS entries; ...

PT-2021-19268

Name of the Vulnerable Software and Affected Versions XWiki version 12.10.2 Description The issue allows for XSS via an SVG document to the upload feature of the comment section. Recommendations For XWiki version 12.10.2, update to a version that fixes this issue to prevent XSS attacks through th...

CVE-2021-3137: Improper Neutralization of Input During Web Page Generation

XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section...

XWiki 跨站脚本漏洞

Xwiki is a Wiki platform for creating Web collaboration applications from the French company Xwiki. XWiki version 12.10.2 contains a cross-site scripting vulnerability that could be exploited to launch a cross-site scripting attack against a target via the SVG document upload comment feature...

Xwiki CMS 12.10.2 - Cross Site Scripting (XSS)

Exploit Title: Xwiki CMS 12.10.2 - Cross Site Scripting XSS Date: 17-01-2021 Exploit Author: Karan Keswani Vendor Homepage: https://www.xwiki.org/xwiki/bin/view/Main/WebHome Software Link: https://www.xwiki.org/xwiki/bin/view/Download/ Version: Xwiki CMS- 12.10.2 Tested on: Windows 10 Description...

Xwiki CMS 12.10.2 Cross Site Scripting

Exploit Title: Xwiki CMS 12.10.2 - Cross Site Scripting XSS Date: 17-01-2021 Exploit Author: Karan Keswani Vendor Homepage: https://www.xwiki.org/xwiki/bin/view/Main/WebHome Software Link: https://www.xwiki.org/xwiki/bin/view/Download/ Version: Xwiki CMS- 12.10.2 Tested on: Windows 10 Description...

XWiki < 12.8 Escaping Vulnerability

XWiki Platform mishandles escaping in the property displayer. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; if...

XWiki Platform has unspecified vulnerabilities

XWiki Platform is a set of wiki platforms for creating web collaboration applications from the French company XWiki Xwiki. XWiki Platform has a security vulnerability that stems from incorrect handling of escapes in the display of properties. No details of the vulnerability are currently availabl...

CVE-2020-13654

XWiki Platform before 12.8 mishandles escaping in the property displayer...

CVE-2020-13654

XWiki Platform before 12.8 mishandles escaping in the property displayer...

Denial of service

XWiki Platform before 12.8 mishandles escaping in the property displayer...

CVE-2020-13654

XWiki Platform before 12.8 mishandles escaping in the property displayer...

PT-2020-13641 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 12.8 Description: The issue is related to the mishandling of escaping in the property displayer. Recommendations: For versions prior to 12.8, update to version 12.8 or later to resolve the issue...

CVE-2020-13654

XWiki Platform before 12.8 mishandles escaping in the property displayer...

Xwiki XWiki Platform 安全漏洞

XWiki Platform is a set of wiki platforms for creating web collaboration applications from the French company XWiki Xwiki. XWiki Platform has a security vulnerability that stems from incorrect handling of escapes in the display of properties. No details of the vulnerability are currently availabl...

CVE-2020-13654

CVE-2020-13654 affects XWiki Platform prior to 12.8, where the property displayer mishandles escaping. The root cause is improper escaping in the property displayer, with impact stated as confidentially high/partial and no explicit exploitation details in the provided materials. Remediation refer...

CVE-2020-13654: Improper Encoding or Escaping of Output

XWiki Platform before 12.8 mishandles escaping in the property displayer...

CVE-2020-13654

XWiki Platform before 12.8 mishandles escaping in the property displayer...

XWiki < 11.10.6, 12.x < 12.5 RCE Vulnerability

XWiki is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; if...

Vulnerability fixed in XWiki

A vulnerability has been fixed in XWiki. The vulnerability allows an authenticated malicious person to execute arbitrary code execute arbitrary code under the user's privileges. XWiki has released updates to fix the vulnerability. More information can be found on the page below:...