Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-annotation-ui

1 known vulnerabilities.

1 result · Feed

  • Critical 10.0
    CVE-2023-26475 EPSS 64%

    XWiki Platform vulnerable to Remote Code Execution in Annotations

    XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the docume…