CVE-2022-24898
1 advisory.
Maven/org.xwiki.commons:xwiki-commons-xml CVE-2022-24898: medium 4.9, EPSS 1.49%
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Action: Upgrade org.xwiki.commons:xwiki-commons-xml to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7 | 12.10.10 | - |
| 13.0.0 | 13.4.4 | - |
| 13.5-rc-1 | 13.8-rc-1 | - |
Fixed versions
| 12.10.10 | 13.4.4 | 13.8-rc-1 |
Sources
- osv: GHSA-m2r5-4w96-qxg5
- https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-m2r5-4w96-qxg5
- https://nvd.nist.gov/vuln/detail/CVE-2022-24898
- https://github.com/xwiki/xwiki-commons/commit/947e8921ebd95462d5a7928f397dd1b64f77c7d5
- https://github.com/xwiki/xwiki-commons
- https://jira.xwiki.org/browse/XWIKI-18946
CVE-2022-24898 · published · modified · JSON