org.xwiki.platform:xwiki-platform-administration

2 results · Feed

• Critical 10.0
  CVE-2023-46731 EPSS 90%

  Remote code execution through the section parameter in Administration as guest in XWiki Platform

  XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows any user with read ac…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-administration-ui org.xwiki.platform:xwiki-platform-administration Maven
  Nov 6, 2023
• Critical 10.0
  CVE-2023-29514

  Code injection in template provider administration in xwiki-platform

  XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e.g., their own user profile) can execute code with programming rights, leading to remote code execution. This …

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-administration-ui org.xwiki.platform:xwiki-platform-administration Maven
  Apr 18, 2023