CVE-2023-45138
1 advisory.
Maven/org.xwiki.contrib.changerequest:application-changerequest-ui CVE-2023-45138: critical 10
XWiki Change Request Application UI XSS and remote code execution through change request title
Action: Upgrade org.xwiki.contrib.changerequest:application-changerequest-ui to 1.9.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: GHSA-f776-w9v2-7vfj
- https://github.com/xwiki-contrib/application-changerequest/security/advisories/GHSA-f776-w9v2-7vfj
- https://nvd.nist.gov/vuln/detail/CVE-2023-45138
- https://github.com/xwiki-contrib/application-changerequest/commit/7565e720117f73102f5a276239eabfe85e15cff4
- https://github.com/xwiki-contrib/application-changerequest
- https://jira.xwiki.org/browse/CRAPP-298
CVE-2023-45138 · published · modified · JSON