Lucene search
+L

2 matches found

OSV
OSV
added 2026/05/26 7:33 p.m.12 views

GHSA-VGWR-23FQ-PR7G XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin

Impact A potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension installed on the wiki to write arbitrary files. While the consequences could be severe like overriding configuration files and setting the superadmin password, the attack first requir...

5.9CVSS5.9AI score0.00056EPSS
SaveExploits0References4
Rows per page
Query Builder