Product · xwiki-contrib

application-admintools

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.7

CVE-2023-48292 Public exploit EPSS 23%

XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacke…

xwiki-contrib application-admintools org.xwiki.contrib:xwiki-application-admintools Maven

Nov 20, 2023