Lucene search
+L

1 matches found

OSV
OSV
added 2022/09/16 5:21 p.m.38 views

GHSA-2G5C-228J-P52X XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection

Impact The tags document Main.Tags in XWiki didn't sanitize user inputs properly, allowing users with view rights on the document default in a public wiki or for authenticated users on private wikis to execute arbitrary Groovy, Python and Velocity code with programming rights. This allows bypassi...

9.9CVSS9.3AI score0.73608EPSS
SaveExploits2References5
Rows per page
Query Builder