Lucene search
+L

1 matches found

OSV
OSV
added 2023/11/07 11:02 p.m.30 views

GHSA-G2QQ-C5J9-5W5W XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action

Impact In XWiki Platform, it's possible for a user to execute any content with the right of an existing document's content author, provided the user have edit right on it. The reason for this is that the edit action sets the content without modifying the content author. To reproduce: Log in as a...

8.8CVSS9.3AI score0.00985EPSS
SaveExploits0References5
Rows per page
Query Builder