Description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| xwiki | xwiki-platform | >= 8.1-milestone-1, < 14.10.5, >= 15.0-rc-1, < 15.1-rc-1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.xwiki.platform:xwiki-platform-help-ui | >= 8.1-milestone-1, < 14.10.5 | 14.10.5 | GHSA-h7cw-44vp-jq7h |
| Maven | org.xwiki.platform:xwiki-platform-help-ui | >= 15.0-rc-1, < 15.1-rc-1 | 15.1-rc-1 | GHSA-h7cw-44vp-jq7h |