← Back to browse · API

CVE-2023-32069

Severity
CRITICAL
CVSS
10.0
EPSS
0.00779
Risk score
40.27
CISA KEV
No
PoC
No
Published
2023-05-09
Modified
2025-01-28
First seen
2026-08-07
Aliases
EUVD-2023-1457, GHSA-36FM-J33W-C25F
Products
xwiki:xwiki-platform 3.3-milestone-3, < 14.10.4
Sources
euvd EUVD-2023-1457

Description

XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user to execute anything with the right of the author of the XWiki.ClassSheet document. This has been patched in XWiki 15.0-rc-1 and 14.10.4. There are no known workarounds.

References