CVE-2023-41046

creationtimestamp| type| source ---|---|--- 2023-09-02 00:14:13+00:00| seen| https://t.me/cibsecurity/69697...

CVE-2023-41046

CVE-2023-41046 describes a velocity code execution flaw in XWiki Platform where VelocityCode/VelocityWiki properties can run Velocity without script rights. The code executes with the correct context author, but cannot access privileged APIs; however, it may access data/APIs that enable further p...