1 matches found
Velocity execution without script right through VelocityCode and VelocityWiki property
Impact It is possible in XWiki to execute Velocity code without having script right by creating an XClass with a property of type "TextArea" and content type "VelocityCode" or "VelocityWiki". For the former, the syntax of the document needs to be set the xwiki/1.0 this syntax doesn't need to be...
6.3CVSS7.2AI score0.00445EPSS
SaveExploits0References6Affected Software1
20