5 matches found
[SECURITY] Fedora 44 Update: kf6-kiconthemes-6.25.0-1.fc44
KDE Frameworks 6 Tier 3 integration module with icon themes...
XWiki Platform vulnerable to Code Injection in icon themes
Impact By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote code execution. There are different attack vectors, the simplest is the Velocity code in the icon...
GHSA-FM68-J7WW-H9XF XWiki Platform vulnerable to Code Injection in icon themes
Impact By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote code execution. There are different attack vectors, the simplest is the Velocity code in the icon...
CVE-2023-36470 Code injection in icon themes of XWiki Platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote...
[SECURITY] Fedora 24 Update: kf5-kiconthemes-5.24.0-1.fc24
KDE Frameworks 5 Tier 3 integration module with icon themes...