CVE-2024-55879 XWiki allows RCE from script right in configurable sections

🗓️ 12 Dec 2024 19:38:17Reported by GitHub_MType

XWiki allows remote code execution from script rights in configurable sections, affecting installations.

Reporter	Title	Published	Views	Family All 7
OSV	CVE-2024-55879	12 Dec 202420:15	–	osv
OSV	XWiki allows RCE from script right in configurable sections	12 Dec 202419:20	–	osv
OSV	XWiki Platform has an SQL injection in getdocuments.vm with sort parameter	12 Dec 202419:22	–	osv
Github Security Blog	XWiki allows RCE from script right in configurable sections	12 Dec 202419:20	–	github
CVE	CVE-2024-55879	12 Dec 202420:15	–	cve
NVD	CVE-2024-55879	12 Dec 202420:15	–	nvd
Cvelist	CVE-2024-55879 XWiki allows RCE from script right in configurable sections	12 Dec 202419:17	–	cvelist

Source	Link
jira	www.jira.xwiki.org/browse/XWIKI-21207
github	www.github.com/xwiki/xwiki-platform/commit/8493435ff9606905a2d913607d6c79862d0c168d
github	www.github.com/xwiki/xwiki-platform/security/advisories/GHSA-r279-47wg-chpr

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo