xwiki__xwiki-commons_CVE-2023-36471_14-10-5

XWiki Commons XWiki Commons は、他のいくつかのトップレベル XWiki プロジェクトに共通する技術ライブラリです。 これらのライブラリは XWiki エコシステム外のプロジェクトでも使用でき、汎用的であり、wiki ドメインとは関係ありません。 XWiki Platform、XWiki Commons、XWiki Rendering は XWiki.org ソフトウェアフォージの一部です。これらはまとめてリリースされ、同じバージョンを共有しています。 ドキュメント ドキュメント API 開発ゾーン ダウンロード XWiki Commons の JAR は、...

CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either create forms that can be used for phishi...

CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either create forms that can be used for phishi...

CVE-2023-36471

CVE-2023-36471 affects XWiki Commons HTML sanitizer (XWiki Commons) where allowed tags include form/input elements. The underlying issue is that the HTML sanitizer allowed form-related tags since 14.6RC1, enabling an attacker without scripting rights to craft a form that could trigger remote code...