CVE-2023-32069
XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user to execute anything with the right of the author of the XWiki.ClassSheet document. This has been patched in XWiki 15.0-rc-1 and 14.10.4. There are no known workarounds.
| Software | From | Fixed in |
|---|---|---|
org.xwiki.platform / xwiki-platform-test-ui
|
3.3-milestone-3 | 14.10.4 |
| xwiki / xwiki | 3.3-milestone2 | 3.3-milestone2.x |
| xwiki / xwiki | 3.4 | 14.10.4 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime