2173 matches found
CVE-2020-13654: Improper Encoding or Escaping of Output
XWiki Platform before 12.8 mishandles escaping in the property displayer...
PT-2020-6996 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 6.3-milestone-2 through 13.10.4 XWiki Platform versions 11.10.6 through 14.3-rc-1 are not needed as they are included in the range above, so the final version is: XWiki Platform versions 6.3-milestone-2 through 13.10.4...
XWiki Platform Code Injection Vulnerability
XWiki Platform is the French company XWiki's set of Wiki platform for creating Web collaboration applications. A code injection vulnerability exists in XWiki Platform versions 7.2 through 11.10.2 fixed in versions 11.3.7, 11.10.3, and 12.0. An attacker can exploit the vulnerability to execute...
CVE-2020-11057
In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. This has been fixed 11.3.7 , 11.10.3 and 12.0...
CVE-2020-11057
In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. This has been fixed 11.3.7 , 11.10.3 and 12.0...
CVE-2020-11057 Code Injection in XWiki Platform
In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. This has been fixed 11.3.7 , 11.10.3 and 12.0...
CVE-2020-11057
In XWiki Platform, CVE-2020-11057 describes a code-injection risk where registered users without scripting/programming permissions could execute Python/Groovy scripts while editing personal dashboards. Affects versions 7.2–11.10.2. The underlying flaw enabled script execution during dashboard edi...
PT-2020-12518
Name of the Vulnerable Software and Affected Versions XWiki Platform versions 7.2 through 11.10.2 Description The issue allows registered users without scripting or programming permissions to execute python or groovy scripts while editing personal dashboards. Recommendations For versions 7.2...
CVE-2020-11057: Improper Control of Generation of Code
In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. This has been fixed 11.3.7 , 11.10.3 and 12.0...
WS-2019-0615
In xwiki-platform, versions xwiki-platform-3.0.1 to xwiki-platform-11.3.2 are vulnerable against privilege escalation when a user manages to set a higher privilege ‘script’ to himself...
WS-2013-0247
In xwiki-platform versions xwiki-platform-5.0 through xwiki-platform-5.1 are vulnerable to cross-site request forgery in the send message functionality...