Lucene search
K

4 matches found

NVD
NVD
added 2022/09/07 2:15 p.m.13 views

CVE-2022-31166

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Starting in versions 11.3.7, 11.0.3, and 12.0RC1, it is possible to exploit a bug in XWikiRights resolution of groups to obtain privilege escalation. More specifically, editing a right with the object editor...

8.8CVSS0.01997EPSS
Exploits1References4
Prion
Prion
added 2022/09/07 2:15 p.m.17 views

Design/Logic Flaw

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Starting in versions 11.3.7, 11.0.3, and 12.0RC1, it is possible to exploit a bug in XWikiRights resolution of groups to obtain privilege escalation. More specifically, editing a right with the object editor...

6.5CVSS8.5AI score0.01997EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2022/09/07 2:10 p.m.18 views

CVE-2022-31166 XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Starting in versions 11.3.7, 11.0.3, and 12.0RC1, it is possible to exploit a bug in XWikiRights resolution of groups to obtain privilege escalation. More specifically, editing a right with the object editor...

8.1CVSS8.8AI score0.01997EPSS
Exploits1References4
OSV
OSV
added 2022/09/07 2:10 p.m.18 views

CVE-2022-31166 XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups

XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform. Starting in versions 11.3.7, 11.0.3, and 12.0RC1, it is possible to exploit a bug in XWikiRights resolution of groups to obtain privilege escalation. More specifically, editing a right with the object editor...

8.1CVSS8AI score0.01997EPSS
Exploits1References6
Rows per page
Query Builder