{"action":"Upgrade org.xwiki.platform:xwiki-platform-administration-ui to 15.10.9 (15.x) or 16.3.0 (16.x) or later.","affected":[{"fixed":"15.10.9","introduced":"2.3"},{"fixed":"16.3.0","introduced":"16.0.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-administration-ui","cve_ids":["CVE-2024-55879"],"ecosystem":"Maven","epss":0.01066,"exploited":false,"fixed_versions":["15.10.9","16.3.0"],"ghsa_id":"GHSA-r279-47wg-chpr","id":"tcs_01M5N9AN1S96479YKJKVRSZWSQ","modified_at":"2026-02-04T04:27:19.349839Z","published_at":"2024-12-12T19:20:56Z","references":["https://osv.dev/vulnerability/GHSA-r279-47wg-chpr","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r279-47wg-chpr","https://nvd.nist.gov/vuln/detail/CVE-2024-55879","https://github.com/xwiki/xwiki-platform/commit/8493435ff9606905a2d913607d6c79862d0c168d","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-21207"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-r279-47wg-chpr","url":"https://osv.dev/vulnerability/GHSA-r279-47wg-chpr"}],"summary":"XWiki allows RCE from script right in configurable sections"}