CVEvulnerability

CVE-2023-29506

6.1 MEDIUM Published 2023-04-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some code using the URL of authenticated endpoints. This problem has been patched on XWiki 13.10.11, 14.4.7 and 14.10.

Affected configurations

• xwiki xwiki (>= 13.10.8 < 13.10.11) • xwiki xwiki (>= 14.4.3 < 14.4.7) • xwiki xwiki 14.6 • xwiki xwiki 14.10

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References