[[email protected]][Issue] Updates for XWIKI-20519: Mail.MailConfig can be edited by any user with edit rights
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20331: RCE payloads stored in comments and profile are executed when admin user edits them.
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20335: RXSS with authenticate endpoints
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20337: Delete/edit the custom filters of other users
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20360: RCE in Annotations
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20365: SXSS in ClassEditSheet page via name parameters
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20324: SSRF - Retrieve sensitive data from server - Add Gadget
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20614: RXSS via xredirect paramer in DeleteApplication
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20352: RXSS via xredirect parameter in restore template
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0
[[email protected]][Issue] Updates for XWIKI-20612: RXSS via xredirect parameter in deletespace template
by XWiki Notifications 10 Dec '24
by XWiki Notifications 10 Dec '24
10 Dec '24
1
0