Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWiki Improper Privilege Management Vulnerability - CVE-2023-26475 - Vulnerability Database
XWikiplatform

XWiki Improper Privilege Management Vulnerability - CVE-2023-26475

High
Reference: CVE-2023-26475
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-26475
Title: XWiki Improper Privilege Management Vulnerability
Overview:

XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1 the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the document. This has been patched in XWiki 13.10.11 14.4.7 and 14.10. There is no easy workaround except to upgrade.