XWiki Platform REST API Code Execution

The vulnerability of the REST API implementation of the XWiki Platform’s collaborative web application creation platform is related to the lack of measures taken to protect the SQL query structure during the processing of the orderField parameter. Exploiting this vulnerability allows a malicious...