WID-SEC-W-2024-3695

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

xwiki: Mehrere Schwachstellen

view advisory published 2024-12-12

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in xwiki ausnutzen, um beliebigen Programmcode auszuführen oder Daten zu manipulieren.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-55879UShigh8.8OT elevated—
XWiki Platform is a generic wiki platform. Starting in version 2.3 and prior to versions 15.10.9, 16.3.0, any user with script rights can perform arbitrary remote code execution by…
CVE-2024-55877UShigh8.8—
XWiki Platform is a generic wiki platform. Starting in version 9.7-rc-1 and prior to versions 15.10.11, 16.4.1, and 16.5.0, any user with an account can perform arbitrary remote co…
CVE-2024-55876USmedium5.4OT elevated—
XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on the main wiki could run schedul…
CVE-2024-55663UScritical9.8—
XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 13.10.5 and 14.3-rc-1, in `getdocument.vm`; the ordering of the returned docume…
CVE-2024-55662UShigh8.8OT elevated—
XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0, on instances where `Extension Repository Application` is in…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan