{"action":"Upgrade org.xwiki.platform:xwiki-platform-vfs-ui to 13.10.11 (13.10.x), 14.4.8 (14.4.x) or 14.10.2 (14.10.x) or later.","affected":[{"fixed":"13.10.11","introduced":"7.4-milestone-2"},{"fixed":"14.4.8","introduced":"14.0-rc-1"},{"fixed":"14.10.2","introduced":"14.5"}],"component":"org.xwiki.platform:xwiki-platform-vfs-ui","cve_ids":["CVE-2023-29521"],"ecosystem":"Maven","epss":0.01131,"exploited":false,"fixed_versions":["13.10.11","14.4.8","14.10.2"],"ghsa_id":"GHSA-p67q-h88v-5jgr","id":"tcs_01M5N96MM7J5WDMSFPKJG3HEVH","modified_at":"2026-09-10T03:50:01.148172402Z","published_at":"2023-04-20T22:06:19Z","references":["https://osv.dev/vulnerability/GHSA-p67q-h88v-5jgr","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p67q-h88v-5jgr","https://nvd.nist.gov/vuln/detail/CVE-2023-29521","https://github.com/xwiki/xwiki-platform/commit/fad02328f5ec7ab7fe5b932ffb5bc5c1ba7a5b12","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20260"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-p67q-h88v-5jgr","url":"https://osv.dev/vulnerability/GHSA-p67q-h88v-5jgr"}],"summary":"XWiki Platform vulnerable to code injection from account/view through VFS Tree macro"}