CVE-2023-35150

CVSS 3.1 Score 8.0 of 10 (high)

Details

Published Jun 23, 2023

Updated: Jun 30, 2023

CWE ID 94

CWE ID 95

Summary

CVE-2023-35150 is a remote code execution vulnerability affecting the XWiki Platform, a versatile wiki solution for application development. Prior to versions 14.4.8, 15.0, and 14.10.4, this issue, starting from version 2.40m-2, allows any user with view rights to execute code with programming privileges by manipulating document URLs, thereby exposing systems to potential attacks. This vulnerability has been rectified in the aforementioned patched versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Xwiki

Affected Vendors

xwiki

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/rt2Bf0
https://www.cve.org/CVERecord?id=CVE-2023-35150
https://nvd.nist.gov/vuln/detail/CVE-2023-35150

Back to Vulnerability Database