Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
Résumé
Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
Description d'origine
La description telle que publiée par la source (souvent en anglais).
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Simple users can create global SSX/JSX without specific rights: in theory only users with Programming Rights should be allowed to create SSX or JSX that are executed everywhere on a wiki. But a bug allow anyone with edit rights to actually create those. This issue has been patched in XWiki 13.10-rc-1, 12.10.11 and 13.4.6. There's no easy workaround for this issue, administrators should upgrade their wiki.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web jira.xwiki.org