Free Trial

CVE-2023-26477 : XWIKI PRIOR 13.10.10/14.4.6/14.9-RC-1 REQUEST PARAMETER NEWTHEMENAME NEUTRALIZATION OF DIRECTIVES

Description

XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and 6.2.4, it’s possible to inject arbitrary wiki syntax including Groovy, Python and Velocity script macros via the `newThemeName` request parameter (URL parameter), in combination with additional parameters. This has been patched in the supported versions 13.10.10, 14.9-rc-1, and 14.4.6. As a workaround, it is possible to edit `FlamingoThemesCode.WebHomeSheet` and manually perform the changes from the patch fixing the issue.

References

https://jira.xwiki.org/browse/XWIKI-19757

https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-x2qm-r4wx-8gpg

https://github.com/xwiki/xwiki-platform/commit/ea2e615f50a918802fd60b09ec87aa04bc6ea8e2#diff-e2153fa59f9d92ef67b0afbf27984bd17170921a3b558fac227160003d0dfd2aR283-R284

For More Information

MITRE

Common Vulnerabilityies and Exposures

CVE-2023-26477 : XWIKI PRIOR 13.10.10/14.4.6/14.9-RC-1 REQUEST PARAMETER NEWTHEMENAME NEUTRALIZATION OF DIRECTIVES
CVE-2023-26477 : XWIKI PRIOR 13.10.10/14.4.6/14.9-RC-1 REQUEST PARAMETER NEWTHEMENAME NEUTRALIZATION OF DIRECTIVES

Contact us to get started

CVE-2024-26922 : LINUX KERNEL UP TO 6.9-RC4 AMDGPU PRIVILEGE ESCALATION

CVE-2024-26922 : LINUX KERNEL UP TO 6.9-RC4 AMDGPU PRIVILEGE ESCALATION

Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more

Learn more
CVE-2024-21511 : MYSQL2 UP TO 3.9.6 READCODEFOR TIMEZONE CODE INJECTION

CVE-2024-21511 : MYSQL2 UP TO 3.9.6 READCODEFOR TIMEZONE CODE INJECTION

Description Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the

Learn more
CVE-2024-29733 : APACHE AIRFLOW UP TO 3.6.X FTP PROVIDER CERTIFICATE VALIDATION

CVE-2024-29733 : APACHE AIRFLOW UP TO 3.6.X FTP PROVIDER CERTIFICATE VALIDATION

Description Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTP_TLS connections,

Learn more