Lucene search
+L

1 matches found

OSV
OSV
added 2025/02/20 8:16 p.m.22 views

GHSA-RR6P-3PFG-562J XWiki Platform allows remote code execution as guest via SolrSearchMacros request

Impact Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to...

9.8CVSS9.8AI score0.99864EPSS
SaveExploits51References8
Rows per page
Query Builder