1 matches found
GHSA-9875-CW22-F7CX XWiki allows remote code execution through default value of wiki macro wiki-type parameters
Impact Any user with edit right on a page could be the user's profile can execute code Groovy, Python, Velocity with programming right by defining a wiki macro. This allows full access to the whole XWiki installation and thus impacts its confidentiality, integrity and availability. The main probl...
8.7CVSS6AI score0.00489EPSS
SaveExploits1References5
20