CVE-2021-21379
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-rendering-wikimacro-store CVE-2021-21379: low
It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro
Action: Upgrade org.xwiki.platform:xwiki-platform-rendering-wikimacro-store to 11.10.11 (11.10.x), 12.6.3 (12.6.x) or 12.8 (12.8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.4 | 11.10.11 | - |
| 12.0 | 12.6.3 | - |
| 12.7 | 12.8 | - |
Fixed versions
| 11.10.11 | 12.6.3 | 12.8 |
Sources
- osv: GHSA-v662-xpcc-9xf6
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v662-xpcc-9xf6
- https://nvd.nist.gov/vuln/detail/CVE-2021-21379
- https://jira.xwiki.org/browse/XWIKI-17759
CVE-2021-21379 · published · modified · JSON