High WID-SEC-2024-1442 1 CVE

xwiki: Schwachstelle ermöglicht Codeausführung

Published Jun 24, 2024 · Updated Jun 24, 2024 · de-DE

Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in xwiki ausnutzen, um beliebigen Programmcode auszuführen.

Product

XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen

Vulnerabilities 1

Critical 10.0

CVE-2024-38369

XWiki programming rights may be inherited by inclusion

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The content of a document included using `{{include reference="targetdocument"/}}` is executed with the right of the includer and not with the right of it…

xwiki xwiki-platform org.xwiki.platform:xwiki-platform-rendering-macro-include Maven

Jun 24, 2024

Revision history

2024-06-24 #1
Initiale Fassung

References

GitHub Advisory Database vom 2024-06-24
https://github.com/advisories/GHSA-qcj3-wpgm-qpxh