HTML Injection

🗓️ 03 Jul 2023 05:09:01Reported by Veracode Vulnerability DatabaseType

xwiki-commons-xml HTML Injection vulnerabilit

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Xwiki Commons modules on the XWiki platform, which is used for creating collaborative web applications. This allows a hacker to execute arbitrary code.	7 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-36471	30 Jun 202300:14	–	circl
CNNVD	XWiki Commons 跨站脚本漏洞	29 Jun 202300:00	–	cnnvd
CVE	CVE-2023-36471	29 Jun 202319:44	–	cve
Cvelist	CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml	29 Jun 202319:44	–	cvelist
EUVD	EUVD-2023-1714	3 Oct 202520:07	–	euvd
Github Security Blog	org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted	30 Jun 202320:41	–	github
NVD	CVE-2023-36471	29 Jun 202320:15	–	nvd
OSV	CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml	29 Jun 202319:44	–	osv
OSV	GHSA-6PQF-C99P-758V org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted	30 Jun 202320:41	–	osv

Vulners

Node

xwiki xwiki-commons-xmlRange15.0-rc-1–15.1java

xwiki xwiki-commons-xmlRange14.6-rc-1–14.10.5java

Source	Link
jira	www.jira.xwiki.org/browse/XCOMMONS-2634
github	www.github.com/xwiki/xwiki-commons/commit/f0bf12863e57d421b156a3115e4bb1cf8eef8cd2
github	www.github.com/xwiki/xwiki-commons/commit/99484d48e899a68a1b6e33d457825b776c6fe8c3
github	www.github.com/advisories/GHSA-6pqf-c99p-758v
github	www.github.com/xwiki/xwiki-commons/security/advisories/GHSA-6pqf-c99p-758v

06 Jul 2023 16:28Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.4 - 9

EPSS0.01021

SSVC