xwiki__xwiki-commons_CVE-2022-24897_12-6-6

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

CVE-2022-24897 Arbitrary filesystem write access from Velocity

APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.3 and prior to 12.6.7, 12.10.3, and 13.0, the velocity scripts are not properly sandboxed against using the Java File API to perform read or write operations on the filesystem...

CVE-2022-24897 Arbitrary filesystem write access from Velocity

APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.3 and prior to 12.6.7, 12.10.3, and 13.0, the velocity scripts are not properly sandboxed against using the Java File API to perform read or write operations on the filesystem...

CVE-2022-24897 Arbitrary filesystem write access from Velocity

APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.3 and prior to 12.6.7, 12.10.3, and 13.0, the velocity scripts are not properly sandboxed against using the Java File API to perform read or write operations on the filesystem...

org.xwiki.commons:xwiki-commons-legacy-velocity (>=12.7, <=12.10.2), org.xwiki.rendering:xwiki-rendering-test (>=12.7, <=12.10.2) potentially affected by CVE-2022-24897 via org.xwiki.commons:xwiki-commons-velocity (>=12.7, <=12.10.2)

org.xwiki.commons:xwiki-commons-velocity MAVEN version =12.7, =12.7, =12.7, =12.10.2 Source cves: CVE-2022-24897 Source advisory: MEND:CVE-2022-24897...

org.xwiki.commons:xwiki-commons-legacy-velocity (>=10.7-rc-1, <=12.6.6), org.xwiki.rendering:xwiki-rendering-syntax-xwiki10 (>=3.2-milestone-3, <=7.4.6) +1 more potentially affected by CVE-2022-24897 via org.xwiki.commons:xwiki-commons-velocity (>=3.2-milestone-3, <=12.6.6)

org.xwiki.commons:xwiki-commons-velocity MAVEN version =3.2-milestone-3, =10.7-rc-1, =3.2-milestone-3, =4.3-milestone-2, =12.6.6 Source cves: CVE-2022-24897 Source advisory: GHSA-CVX5-M8VG-VXGC...

org.xwiki.commons:xwiki-commons-legacy-velocity (>=12.7, <=12.10.2), org.xwiki.rendering:xwiki-rendering-test (>=12.7, <=12.10.2) potentially affected by CVE-2022-24897 via org.xwiki.commons:xwiki-commons-velocity (>=12.7, <=12.10.2)

org.xwiki.commons:xwiki-commons-velocity MAVEN version =12.7, =12.7, =12.7, =12.10.2 Source cves: CVE-2022-24897 Source advisory: OSV:GHSA-CVX5-M8VG-VXGC...