{"action":"Upgrade org.xwiki.platform:xwiki-platform-notifications-ui to 14.10.6 (14.x) or 15.2-rc-1 (15.x) or later.","affected":[{"fixed":"14.10.6","introduced":"9.6-rc-1"},{"fixed":"15.2-rc-1","introduced":"15.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-notifications-ui","cve_ids":["CVE-2023-36469"],"ecosystem":"Maven","epss":0.82032,"exploited":false,"fixed_versions":["14.10.6","15.2-rc-1"],"ghsa_id":"GHSA-94pf-92hw-2hjc","id":"tcs_01M5N8P3RDZJWGSNC9CKKT6VEM","modified_at":"2023-11-08T04:12:56.922041Z","published_at":"2023-06-30T20:42:02Z","references":["https://osv.dev/vulnerability/GHSA-94pf-92hw-2hjc","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-94pf-92hw-2hjc","https://nvd.nist.gov/vuln/detail/CVE-2023-36469","https://github.com/xwiki/xwiki-platform/commit/217e5bb7a657f2991b154a16ef4d5ae9c29ad39c","https://github.com/xwiki/xwiki-platform/commit/217e5bb7a657f2991b154a16ef4d5ae9c29ad39c#diff-7221a548809fa2ba34348556f4b5bd436463c559ebdf691197932ee7ce4478ca","https://github.com/xwiki/xwiki-platform/commit/217e5bb7a657f2991b154a16ef4d5ae9c29ad39c#diff-b261c6eac3108c3e6e734054c28a78f59d3439ab72fe8582dadf87670a0d15a4","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20610"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-94pf-92hw-2hjc","url":"https://osv.dev/vulnerability/GHSA-94pf-92hw-2hjc"}],"summary":"XWiki Platform vulnerable to Code injection through NotificationRSSService"}