CVE - CVE-2024-43401

CVE-ID
CVE-2024-43401	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can trick a user with elevated rights to edit a content with a malicious payload using a WYSIWYG editor. The user with elevated rights is not warned beforehand that they are going to edit possibly dangerous content. The payload is executed at edit time. This vulnerability has been patched in XWiki 15.10RC1.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f963-4cq8-2gw7 URL:https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f963-4cq8-2gw7 MISC:https://jira.xwiki.org/browse/XWIKI-20331 URL:https://jira.xwiki.org/browse/XWIKI-20331 MISC:https://jira.xwiki.org/browse/XWIKI-21311 URL:https://jira.xwiki.org/browse/XWIKI-21311 MISC:https://jira.xwiki.org/browse/XWIKI-21481 URL:https://jira.xwiki.org/browse/XWIKI-21481 MISC:https://jira.xwiki.org/browse/XWIKI-21482 URL:https://jira.xwiki.org/browse/XWIKI-21482 MISC:https://jira.xwiki.org/browse/XWIKI-21483 URL:https://jira.xwiki.org/browse/XWIKI-21483 MISC:https://jira.xwiki.org/browse/XWIKI-21484 URL:https://jira.xwiki.org/browse/XWIKI-21484 MISC:https://jira.xwiki.org/browse/XWIKI-21485 URL:https://jira.xwiki.org/browse/XWIKI-21485 MISC:https://jira.xwiki.org/browse/XWIKI-21486 URL:https://jira.xwiki.org/browse/XWIKI-21486 MISC:https://jira.xwiki.org/browse/XWIKI-21487 URL:https://jira.xwiki.org/browse/XWIKI-21487 MISC:https://jira.xwiki.org/browse/XWIKI-21488 URL:https://jira.xwiki.org/browse/XWIKI-21488 MISC:https://jira.xwiki.org/browse/XWIKI-21489 URL:https://jira.xwiki.org/browse/XWIKI-21489 MISC:https://jira.xwiki.org/browse/XWIKI-21490 URL:https://jira.xwiki.org/browse/XWIKI-21490
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20240812	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240812)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)