CVE-2023-22457

Summary: CVE-2023-22457 affects the CKEditor Integration UI (org.xwiki.contrib:application-ckeditor-ui) used with XWiki. Prior to version 1.64.3, the CKEditor.HTMLConverter document lacked CSRF protection, enabling a privileged user with programming rights to trigger a GET request that could exec...