Lucene search
+L

1 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/12/19 12:0 a.m.19 views

XWiki.org XWiki SolrSearchMacros text Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of XWiki.org XWiki. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the text parameter provided to the SolrSearchMacros endpoint. The issue...

9.8CVSS7.2AI score0.99864EPSS
SaveExploits51References1
Rows per page
Query Builder