Логотип exploitDog
bind:CVE-2022-29252
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-29252

Количество 2

Количество 2

nvd логотип

CVE-2022-29252

больше 3 лет назад

XWiki Platform Wiki UI Main Wiki is a package for managing subwikis. Starting with version 5.3-milestone-2, XWiki Platform Wiki UI Main Wiki contains a possible cross-site scripting vector in the `WikiManager.JoinWiki ` wiki page related to the "requestJoin" field. The issue is patched in versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3. The easiest available workaround is to edit the wiki page `WikiManager.JoinWiki` (with wiki editor) according to the suggestion provided in the GitHub Security Advisory.

CVSS3: 7.4
EPSS: Низкий
github логотип

GHSA-ph5x-h23x-7q5q

больше 3 лет назад

Cross-site Scripting in wiki manager join wiki page

CVSS3: 7.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-29252

XWiki Platform Wiki UI Main Wiki is a package for managing subwikis. Starting with version 5.3-milestone-2, XWiki Platform Wiki UI Main Wiki contains a possible cross-site scripting vector in the `WikiManager.JoinWiki ` wiki page related to the "requestJoin" field. The issue is patched in versions 12.10.11, 14.0-rc-1, 13.4.7, and 13.10.3. The easiest available workaround is to edit the wiki page `WikiManager.JoinWiki` (with wiki editor) according to the suggestion provided in the GitHub Security Advisory.

CVSS3: 7.4
1%
Низкий
больше 3 лет назад
github логотип
GHSA-ph5x-h23x-7q5q

Cross-site Scripting in wiki manager join wiki page

CVSS3: 7.4
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу