tocsin

CVE-2023-29525

2 advisories.

Maven/org.xwiki.platform:xwiki-platform-distribution-war CVE-2023-29525: critical 9.9, EPSS 77.75%

XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration

Action: Upgrade org.xwiki.platform:xwiki-platform-distribution-war to the fixed version for your line (see fixed_versions).

Affected

introducedfixedlast affected
12.6.113.10.11-
14.0-rc-114.4.8-
14.514.6-rc-1-

Fixed versions

13.10.1114.4.814.6-rc-1

Sources

CVE-2023-29525 · published · modified · JSON

Maven/org.xwiki.platform:xwiki-platform-legacy-events-hibernate-ui CVE-2023-29525: critical 9.9, EPSS 77.75%

XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration

Action: Upgrade org.xwiki.platform:xwiki-platform-legacy-events-hibernate-ui to 14.10.3 or later.

Affected

introducedfixedlast affected
14.6-rc-114.10.3-

Fixed versions

14.10.3

Sources

CVE-2023-29525 · published · modified · JSON