PT-2024-36598 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 2.3 through 15.10.8 XWiki Platform versions 16.3.0 before the patch Description: The issue allows any user with script rights to perform arbitrary remote code execution by adding instances of XWiki.ConfigurableClass to...