Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2025/04/29 2:5 p.m.20 views

org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type

Impact When editing a page, XWiki warns since version 15.9 when there is content on the page like a script macro that would gain more rights due to the editing. This analysis doesn't consider certain kinds of properties, allowing a user to put malicious scripts in there that will be executed afte...

9CVSS6.9AI score0.00316EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/04/29 2:5 p.m.9 views

GHSA-MVGM-3RW2-7J4R org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type

Impact When editing a page, XWiki warns since version 15.9 when there is content on the page like a script macro that would gain more rights due to the editing. This analysis doesn't consider certain kinds of properties, allowing a user to put malicious scripts in there that will be executed afte...

9CVSS7AI score0.00316EPSS
SaveExploits0References5
Rows per page
Query Builder