CVE-2023-50723
1 advisory.
Maven/org.xwiki.platform:xwiki-platform-administration-ui CVE-2023-50723: critical 9.9
Remote code execution/programming rights with configuration section from any user account
Action: Upgrade org.xwiki.platform:xwiki-platform-administration-ui to the fixed version for your line (see fixed_versions).
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3 | 14.10.15 | - |
| 15.0-rc-1 | 15.5.2 | - |
| 15.6-rc-1 | 15.7-rc-1 | - |
Fixed versions
| 14.10.15 | 15.5.2 | 15.7-rc-1 |
Sources
- osv: GHSA-qj86-p74r-7wp5
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-qj86-p74r-7wp5
- https://nvd.nist.gov/vuln/detail/CVE-2023-50723
- https://github.com/xwiki/xwiki-platform/commit/0f367aaae4e0696f61cf5a67a75edd27d1d16db6
- https://github.com/xwiki/xwiki-platform/commit/1157c1ecea395aac7f64cd8a6f484b1225416dc7
- https://github.com/xwiki/xwiki-platform/commit/749f6aee1bfbcf191c3734ea0aa9eba3aa63240e
- https://github.com/xwiki/xwiki-platform/commit/bd82be936c21b65dee367d558e3050b9b6995713
- https://github.com/xwiki/xwiki-platform
- https://jira.xwiki.org/browse/XWIKI-21121
- https://jira.xwiki.org/browse/XWIKI-21122
- https://jira.xwiki.org/browse/XWIKI-21194
CVE-2023-50723 · published · modified · JSON