CVE-2023-29514
3 advisories.
Maven/org.xwiki.platform.applications:xwiki-application-administration CVE-2023-29514: critical 9.9, EPSS 1.86%
XWiki vulnerable to Code Injection in template provider administration
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.35 | - | 1.49 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9j36-3cp4-rh4j
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j
- https://nvd.nist.gov/vuln/detail/CVE-2023-29514
- https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-20268
CVE-2023-29514 · published · modified · JSON
Maven/org.xwiki.platform:xwiki-platform-administration CVE-2023-29514: critical 9.9, EPSS 1.86%
XWiki vulnerable to Code Injection in template provider administration
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1-milestone-1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9j36-3cp4-rh4j#Maven/org.xwiki.platform:xwiki-platform-administration
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j
- https://nvd.nist.gov/vuln/detail/CVE-2023-29514
- https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-20268
CVE-2023-29514 · published · modified · JSON
Maven/org.xwiki.platform:xwiki-platform-administration-ui CVE-2023-29514: critical 9.9, EPSS 1.86%
XWiki vulnerable to Code Injection in template provider administration
Action: Upgrade org.xwiki.platform:xwiki-platform-administration-ui to 13.10.11 (13.10.x), 14.4.8 (14.4.x) or 14.10.1 (14.10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2-milestone-1 | 13.10.11 | - |
| 14.0-rc-1 | 14.4.8 | - |
| 14.5 | 14.10.1 | - |
Fixed versions
| 13.10.11 | 14.4.8 | 14.10.1 |
Sources
- osv: GHSA-9j36-3cp4-rh4j#Maven/org.xwiki.platform:xwiki-platform-administration-ui
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9j36-3cp4-rh4j
- https://nvd.nist.gov/vuln/detail/CVE-2023-29514
- https://github.com/xwiki/xwiki-platform/commit/7bf7094f8ffac095f5d66809af7554c9cc44de09
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-20268
CVE-2023-29514 · published · modified · JSON