Description

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.

Remediation

References

CVE-2023-35166

Related Vulnerabilities

MongoDb Improper Input Validation Vulnerability (CVE-2021-20330)

MySQL CVE-2023-22078 Vulnerability (CVE-2023-22078)

MediaWiki CVE-2023-45362 Vulnerability (CVE-2023-45362)

WordPress Plugin Advanced Custom Fields (ACF) PHP Object Injection (6.0.7)

Python Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2022-0391)

Severity

High

Classification

CVE-2023-35166 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities