XWiki Open Redirect Vulnerability (GHSA-jp55-vvmf-63mv)

Xwiki is prone to an open redirect vulnerability SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

CVE-2022-23618 Open Redirect in xwiki-platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is no protection against URL redirection to untrusted sites, in particular some well known parameters xredirect can be used to perform url redirections. This problem...

CVE-2022-23618

XWiki Platform contains an open redirect vulnerability where certain URL parameters (notably xredirect) allow redirection to untrusted sites. Affected releases are XWiki Platform prior to the patches, with fixes implemented in XWiki 12.10.7 and XWiki 13.3RC1. Connected advisories and sources corr...