CVE-2022-24897
1 advisory.
Maven/org.xwiki.commons:xwiki-commons-velocity CVE-2022-24897: high 7.5
Arbitrary filesystem write access from velocity.
Action: Upgrade org.xwiki.commons:xwiki-commons-velocity to 12.6.7 (12.6.x) or 12.10.3 (12.10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.0 | 12.6.7 | - |
| 12.7.0 | 12.10.3 | - |
Fixed versions
| 12.6.7 | 12.10.3 |
Sources
- osv: GHSA-cvx5-m8vg-vxgc
- https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-cvx5-m8vg-vxgc
- https://nvd.nist.gov/vuln/detail/CVE-2022-24897
- https://github.com/xwiki/xwiki-commons/pull/127
- https://github.com/xwiki/xwiki-commons/commit/215951cfb0f808d0bf5b1097c9e7d1e503449ab8
- https://github.com/xwiki/xwiki-commons
- https://jira.xwiki.org/browse/XWIKI-5168
CVE-2022-24897 · published · modified · JSON