Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWiki Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2022-36095 - Vulnerability Database
XWikiplatform

XWiki Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2022-36095

Medium
Reference: CVE-2022-36095
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-36095
Title: XWiki Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3 it is possible to perform a Cross-Site Request Forgery (CSRF) attack for adding or removing tags on XWiki pages. The problem has been patched in XWiki 13.10.5 and 14.3. As a workaround one may locally modify the documentTags.vm template in one39s filesystem to apply the changes exposed there.