XWiki 3.3-milestone-1 < 15.10.9, 16.0.0-rc-1 < 16.3.0 RCE Vulnerability (GHSA-j2pq-22jj-4pm5)

Xwiki is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

CVE-2024-55662

creationtimestamp| type| source ---|---|--- 2024-12-12 17:29:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113641035648128218 2024-12-12 19:41:34+00:00| seen| https://t.me/cvedetector/12799...

CVE-2024-55662

CVE-2024-55662 affects XWiki Platform (3.3-milestone-1 to versions before 15.10.9 and 16.3.0) when the Extension Repository Application is installed. The root cause is that a user with access to the server can execute code requiring programming rights via the Extension Repository Application, ena...