CVE-2023-50732
Velocity execution without script right through tree macro
Résumé
Velocity execution without script right through tree macro
Description d'origine
La description telle que publiée par la source (souvent en anglais).
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute a Velocity script without script right through the document tree. This has been patched in XWiki 14.10.7 and 15.2RC1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web jira.xwiki.org