xwiki__xwiki-commons_CVE-2023-36471_14-10-5

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

org.xwiki.commons:xwiki-commons-diff-script (>=15.0-rc-1, <=15.1), org.xwiki.commons:xwiki-commons-diff-xml (>=15.0-rc-1, <=15.1) +35 more potentially affected by CVE-2023-36471 via org.xwiki.commons:xwiki-commons-xml (>=15.0-rc-1, <=15.1)

org.xwiki.commons:xwiki-commons-xml MAVEN version =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.0-rc-1, =15.1 and more Source cves: CVE-2023-36471 Source...

CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either create forms that can be used for phishi...

CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either create forms that can be used for phishi...

CVE-2023-36471

CVE-2023-36471 affects XWiki Commons HTML sanitizer (XWiki Commons) where allowed tags include form/input elements. The underlying issue is that the HTML sanitizer allowed form-related tags since 14.6RC1, enabling an attacker without scripting rights to craft a form that could trigger remote code...