org.xwiki.contrib:xwiki-application-admintools

2 results · Feed

• High 8.8
  CVE-2023-48293

  XWiki Admin Tools Application CSRF with QueryOnXWiki allows arbitrary database queries

  The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the query on XWiki tool allows executing arbitrary database queries on the database of the XWiki instal…

  xwiki-contrib application-admintools org.xwiki.contrib:xwiki-application-admintools Maven
  Nov 20, 2023
• Critical 9.7
  CVE-2023-48292 Public exploit EPSS 23%

  XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks

  The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacke…

  xwiki-contrib application-admintools org.xwiki.contrib:xwiki-application-admintools Maven
  Nov 20, 2023