Lucene search
+L

1 matches found

OSV
OSV
added 2023/11/08 2:51 p.m.85 views

GHSA-62PR-QQF7-HH89 XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest

Impact XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows any user with read access to the document XWiki.AdminSheet by default, everyone including unauthenticated users to execute code including Groovy code. This...

10CVSS9.4AI score0.88534EPSS
SaveExploits1References6
Rows per page
Query Builder