CVE-2023-35166
Privilege escalation (PR) from account through TipsPanel
Résumé
Privilege escalation (PR) from account through TipsPanel
Description d'origine
La description telle que publiée par la source (souvent en anglais).
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web jira.xwiki.org