XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection

Impact The tags document Main.Tags in XWiki didn't sanitize user inputs properly, allowing users with view rights on the document default in a public wiki or for authenticated users on private wikis to execute arbitrary Groovy, Python and Velocity code with programming rights. This allows bypassi...

CVE-2022-36100

XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Starting with version 1.7 in XWiki Platform Applications Tag and prior to 13.10.6 and 14.4 in XWiki Platform Tag UI, the tags document "Main.Tags" in XWiki didn't sanitize user input...

PT-2022-23191 · Xwiki · Xwiki Platform Applications Tag +1

Name of the Vulnerable Software and Affected Versions: XWiki Platform Applications Tag versions 1.7 through 13.10.5 XWiki Platform Tag UI versions prior to 13.10.6 and 14.4 Description: The tags document Main.Tags in XWiki did not sanitize user inputs properly, allowing users with view rights on...

CVE-2022-36100: Improper Neutralization of Directives in Dynamically Evaluated Code

XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Starting with version 1.7 in XWiki Platform Applications Tag and prior to 13.10.6 and 14.4 in XWiki Platform Tag UI, the tags document Main.Tags in XWiki didn't sanitize user inputs...

Huawei Emui and Magic UI Hijacking Unauthenticated Provider Vulnerability

Huawei Emui is a mobile operating system developed based on Android.Magic Ui is a mobile operating system developed based on Android. A security vulnerability exists in Huawei Emui and Magic UI, which stems from the existence of a hijacking unauthenticated provider vulnerability that can be...