org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro
1 known vulnerabilities.
1 result · Feed
-
Critical 10.0
org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro Eval Injection vulnerability
XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents including the legacy notification activity macro can execute arbitrary Groovy, Python or Velocity code in XWiki …