GitHub Advisoryadvisory · Maven
GHSA-43hg-g44q-474q Cross Site Scripting (XSS) in XWiki
MEDIUM
Official page ↗
- Aliases
- CVE-2021-3137
- Ecosystem
- Maven
- Packages
- org.xwiki.commons:xwiki-commons
- Severity
- Moderate
- Weaknesses
- CWE-79
- Reviewed
- 2021-01-22
Affected packages
• Maven org.xwiki.commons:xwiki-commons: < 12.10.3 → fixed in 12.10.3
Description
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Related
Alias · CVE (1)
- CVE-2021-3137 XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section. vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness