XWiki < 14.10.12, 15.0-rc-1 < 15.5 Multiple Vulnerabilities

Xwiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

CVE-2023-45135

XWiki Platform vulnerability CVE-2023-45135 allows an attacker to pass a page title in the create-action flow that is not displayed initially and is executed in a later step, enabling code execution if the victim has appropriate rights. Affected are org.xwiki.platform:xwiki-platform-web (7.2-mile...