{"action":"Upgrade org.xwiki.platform:xwiki-platform-distribution-war to 13.10.5 (13.x) or 14.3-rc-1 (14.x) or later.","affected":[{"fixed":"13.10.5","introduced":"6.3-milestone-2"},{"fixed":"14.3-rc-1","introduced":"14.0-rc-1"}],"component":"org.xwiki.platform:xwiki-platform-distribution-war","cve_ids":["CVE-2024-55663"],"ecosystem":"Maven","epss":0.0075,"exploited":false,"fixed_versions":["13.10.5","14.3-rc-1"],"ghsa_id":"GHSA-wh34-m772-5398","id":"tcs_01M5N9GEZSS5FE5SAH8EWN5MSG","modified_at":"2026-02-04T02:41:15.264367Z","published_at":"2024-12-12T19:22:12Z","references":["https://osv.dev/vulnerability/GHSA-wh34-m772-5398","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-wh34-m772-5398","https://nvd.nist.gov/vuln/detail/CVE-2024-55663","https://github.com/xwiki/xwiki-platform/commit/673076e2e8b88a36cdeaf7007843aa9ca1a068a0","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-17568"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-wh34-m772-5398","url":"https://osv.dev/vulnerability/GHSA-wh34-m772-5398"}],"summary":"XWiki Platform has an SQL injection in getdocuments.vm with sort parameter"}