com.xpn.xwiki.platform.plugins vulnerabilities

Products

• com.xpn.xwiki.platform.plugins/xwiki-plugin-scheduler 1

Latest com.xpn.xwiki.platform.plugins CVEs

Newest publication first

1. CVE-2023-40573 XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution

   Published 2023-08-24

   High·CVSS 8.8 EPSS 1.1%

   XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain Groovy scripts. Currently, the job checks the content author of the job for programming right. However, modifying or adding a job sc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.