Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
XWiki Permissions Privileges and Access Controls Vulnerability - CVE-2006-7223 - Vulnerability Database
XWikiplatform

XWiki Permissions Privileges and Access Controls Vulnerability - CVE-2006-7223

Medium
Reference: CVE-2006-7223
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-7223
Title: XWiki Permissions Privileges and Access Controls Vulnerability
Overview:

PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose author has programming rights modifying this document to contain a script and previewing without saving the document.