Maven/org.xwiki.platform:xwiki-platform-administration CVE-2023-29514: critical 9.9, EPSS 1.86%
XWiki vulnerable to Code Injection in template provider administration
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1-milestone-1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9j36-3cp4-rh4j#Maven/org.xwiki.platform:xwiki-platform-administration
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j
- https://nvd.nist.gov/vuln/detail/CVE-2023-29514
- https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-20268
CVE-2023-29514 · published · modified · JSON