Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/29 2:03 p.m.12 views

GHSA-X7WV-5QG4-VMR6 org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right

Impact When a user with programming right edits a document in XWiki that was last edited by a user without programming right and contains an XWiki.ComponentClass, there is no warning that this will grant programming right to this object. An attacker who created such a malicious object could use...

9CVSS7AI score0.00385EPSS
SaveExploits1References5
Rows per page
Query Builder