← Back to browse · API

CVE-2023-26474

Severity
CRITICAL
CVSS
10.0
EPSS
0.00787
Risk score
40.28
CISA KEV
No
PoC
No
Published
2023-03-02
Modified
2025-03-05
First seen
2026-08-07
Aliases
EUVD-2023-0846, GHSA-3738-P9X3-MV9R
Products
xwiki:xwiki-platform 13.10, < 13.10.11, xwiki:xwiki-platform 14.0, < 14.4.7, xwiki:xwiki-platform 14.5, < 14.10
Sources
euvd EUVD-2023-0846

Description

XWiki Platform is a generic wiki platform. Starting in version 13.10, it's possible to use the right of an existing document content author to execute a text area property. This has been patched in XWiki 14.10, 14.4.7, and 13.10.11. There are no known workarounds.

References