CVE-2023-29511

CVE-2023-29511 affects XWiki Platform. The issue arises from improper escaping of section ids in XWiki.AdminFieldsDisplaySheet, allowing any user with edit rights on a page to execute arbitrary Groovy, Python, or Velocity code and gain full access to the XWiki installation. Affected or patched ve...