CVE-2023-26475
XWiki Platform vulnerable to Remote Code Execution in Annotations
概要
XWiki Platform vulnerable to Remote Code Execution in Annotations
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the document. This has been patched in XWiki 13.10.11, 14.4.7 and 14.10. There is no easy workaround except to upgrade.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web jira.xwiki.org
- web jira.xwiki.org