CVE-2023-29524
- EPSS 35.5%
- Veröffentlicht 19.04.2023 00:15:09
- Zuletzt bearbeitet 21.11.2024 07:57:13
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything with the right of the Scheduler Application sheet page. A user without script or programming rights, edit your ...
CVE-2023-29525
- EPSS 19%
- Veröffentlicht 19.04.2023 00:15:09
- Zuletzt bearbeitet 21.11.2024 07:57:13
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to code injection in the `since` parameter of the `/xwiki/bin/view/XWiki/Notifications/Code/LegacyNotifica...
CVE-2023-29526
- EPSS 2.23%
- Veröffentlicht 19.04.2023 00:15:09
- Zuletzt bearbeitet 21.11.2024 07:57:14
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to display or interact with any page a user cannot access through the combination of the async and display mac...
CVE-2023-29527
- EPSS 1.04%
- Veröffentlicht 19.04.2023 00:15:09
- Zuletzt bearbeitet 21.11.2024 07:57:14
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions a user without script or programming right may edit a user profile (or any other document) with the wiki editor and add groo...
CVE-2023-29510
- EPSS 2.68%
- Veröffentlicht 19.04.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 07:57:12
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add translations that are only applied to the current user. This also allows overriding existing translations. Such tran...
CVE-2023-29512
- EPSS 1.79%
- Veröffentlicht 19.04.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 07:57:12
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., it's own user page), can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full ac...
CVE-2023-29513
- EPSS 0.85%
- Veröffentlicht 19.04.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 07:57:12
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the `distribution/firstadminuser.wiki` in the wrong context. Th...
CVE-2023-29514
- EPSS 3.35%
- Veröffentlicht 19.04.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 07:57:12
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e.g., their own user profile) can execute code with programming rights, leading to remote code executi...
CVE-2023-29515
- EPSS 1.12%
- Veröffentlicht 19.04.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 07:57:12
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can create a space can become admin of that space through App Within Minutes. The admin right implies the script right and thus allo...
CVE-2023-29516
- EPSS 15.84%
- Veröffentlicht 19.04.2023 00:15:08
- Zuletzt bearbeitet 21.11.2024 07:57:12
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on `XWiki.AttachmentSelector` can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to ...