VYPR

Maven package

org.xwiki.platform/xwiki-platform-annotation-ui

pkg:maven/org.xwiki.platform/xwiki-platform-annotation-ui

Vulnerabilities (1)

  • CVE-2023-26475Mar 2, 2023
    affected >= 2.3-milestone-1, < 13.10.11fixed 13.10.11

    XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the document. This has been pat