Lucene search
+L

2 matches found

OSV
OSV
added 2023/04/20 10:25 p.m.56 views

GHSA-JGRG-QVPP-9VWR XWiki Platform vulnerable to code injection from account through AWM view sheet

Impact Steps to reproduce: 1. As a user without script or programming right, edit your user profile or any other document with the wiki editor and add the content groovyprintln"Hello " + "from Groovy!"/groovy 1. Edit the document with the object editor and add an object of type...

9.9CVSS9.1AI score0.0109EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/04/20 10:25 p.m.35 views

XWiki Platform vulnerable to code injection from account through AWM view sheet

Impact Steps to reproduce: 1. As a user without script or programming right, edit your user profile or any other document with the wiki editor and add the content groovyprintln"Hello " + "from Groovy!"/groovy 1. Edit the document with the object editor and add an object of type...

9.9CVSS6AI score0.0109EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder