Exploit Report

Computer Security And Bug Information


CVE Title
Published Date2023-03-02T18:15Z
Modified Date2023-03-10T05:02Z
CWE TypeCWE-79
DescriptionXWiki Platform is a generic wiki platform. Starting in version 12.10, a user without script rights can introduce a stored cross-site scripting by using the Live Data macro. This has been patched in XWiki 14.9, 14.4.7, and 13.10.10. There are no known workarounds.
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://github.com/xwiki/xwiki-platform/security/advisories/GHSA-32fq-m2q5-h83g
Reference DescriptionMISC https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-32fq-m2q5-h83g
Reference URLhttps://github.com/xwiki/xwiki-platform/commit/556e7823260b826f344c1a6e95d935774587e028
Reference DescriptionMISC https://github.com/xwiki/xwiki-platform/commit/556e7823260b826f344c1a6e95d935774587e028
Reference URLhttps://github.com/xwiki/xwiki-platform/commit/23d5ea9b23e84b5f3d1f1b2d5673fe8c774d0d79
Reference DescriptionMISC https://github.com/xwiki/xwiki-platform/commit/23d5ea9b23e84b5f3d1f1b2d5673fe8c774d0d79
Reference URLhttps://jira.xwiki.org/browse/XWIKI-20143
Reference DescriptionMISC https://jira.xwiki.org/browse/XWIKI-20143
TagsVendor Advisory

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles