Количество 2
Количество 2
CVE-2023-32070
XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version.
GHSA-6gf5-c898-7rxp
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-32070 XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version. | CVSS3: 9 | 5% Низкий | больше 2 лет назад |
| GHSA-6gf5-c898-7rxp Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers | CVSS3: 9 | 5% Низкий | больше 2 лет назад |
Уязвимостей на страницу