CVE-2023-29204

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as //mydomain.com i.e. omitting the http:. It was also possible to bypass it when using URL...

CVE-2023-29204

CVE-2023-29204 affects XWiki Commons (and related XWiki components such as xwiki-platform-oldcore) with an Open Redirect vulnerability. The issue allows bypassing security controls by crafting redirects like //mydomain.com or http:/mydomain.com, enabling user redirection to potentially malicious ...