{"action":"Upgrade org.xwiki.platform:xwiki-platform-display-api to 14.10.7 (14.x) or 15.2-rc-1 (15.x) or later.","affected":[{"fixed":"14.10.7","introduced":"3.2-milestone-3"},{"fixed":"15.2-rc-1","introduced":"15.0"}],"component":"org.xwiki.platform:xwiki-platform-display-api","cve_ids":["CVE-2023-46244"],"ecosystem":"Maven","epss":0.0079,"exploited":false,"fixed_versions":["14.10.7","15.2-rc-1"],"ghsa_id":"GHSA-rmxw-c48h-2vf5","id":"tcs_01M5N9C4A2G3B4QR8SMJ2QYSCM","modified_at":"2026-09-10T03:49:59.210511400Z","published_at":"2023-11-07T23:03:57Z","references":["https://osv.dev/vulnerability/GHSA-rmxw-c48h-2vf5","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rmxw-c48h-2vf5","https://nvd.nist.gov/vuln/detail/CVE-2023-46244","https://github.com/xwiki/xwiki-platform/commit/11a9170dfe63e59f4066db67f84dbfce4ed619c6","https://github.com/xwiki/xwiki-platform/commit/41d7dca2d30084966ca6a7ee537f39ee8354a7e3","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20624","https://jira.xwiki.org/browse/XWIKI-20625"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-rmxw-c48h-2vf5","url":"https://osv.dev/vulnerability/GHSA-rmxw-c48h-2vf5"}],"summary":"XWiki Platform privilege escalation from script right to programming right through title displayer"}