The vulnerability of the REST API implementation of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the REST API implementation of the XWiki Platform’s collaborative web application creation platform is related to the lack of measures taken to protect the SQL query structure during the processing of the orderField parameter. Exploiting this vulnerability allows a malicious...