CVE-2023-46242

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execute a content with the right of any user via a crafted URL. A user must have programming privileges in order to exploit this vulnerability. This issue...

CVE-2023-46242

CVE-2023-46242 affects XWiki Platform. In affected versions, an attacker with programming privileges can cause arbitrary content execution by crafting a URL. The issue is patched in XWiki 14.10.7 and 15.2 RC1; upgrade is advised. No public workarounds are documented in the provided sources. If ex...

CVE-2023-46242 Code injection in XWiki Platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execute a content with the right of any user via a crafted URL. A user must have programming privileges in order to exploit this vulnerability. This issue...