Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-31965 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T01:59:50.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker with administrative privilege to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-produ
A ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0008
CVE ID: CVE-2024-31966 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T01:59:50.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an authenticated attacker with administrative privilege to conduct an argument injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to access sensitive information, modify system configuration or execute arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refer
uration or execute arbitrary commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0009
CVE ID: CVE-2024-31967 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T01:59:50.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an unauthorized access attack due to improper access control. A successful exploit could allow an attacker to gain unauthorized access to user information or the system configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-adviso
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0010
CVE ID: CVE-2024-31970 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-09-03T20:52:04.201759 Vendors: n/a Products: n/a Problem Types: n/a Description: AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level privileges. An attacker can exploit this window to gain unauthorized root access by either modifying the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to
the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to execute arbitrary commands. NOTE: The vendor has disputed this, finding the report not applicable. According to AdTran, SSH has never been accessible (from WAN) on SmartOS official builds. Furthermore, the vendor adds that test build 11.1.0.101-202106231430 was never released to end users. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/cve/blob/main/AdTran/SRG-834-5 - https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-31970 - https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-202400
m/actuator/cve/blob/main/AdTran/CVE-2024-31970 - https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332
CVE ID: CVE-2024-31971 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-11-06T16:05:55.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript, as demonstrated by /mainPassword.html, /processIdentity.html, /public.html, /dhcp.html, /private.html, /hostname.html, /connectivity.html, /NetworkMonitor.html, /trafficMonitoringConfig.html, and /wizardMain.html. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/cve/blob/main/AdTran/NetVanta-3120-XSS
Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/cve/blob/main/AdTran/NetVanta-3120-XSS - https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-31971 - https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715
CVE ID: CVE-2024-31972 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:56:37.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: EnGenius ESR580 A8J-EMR5000 devices allow a remote attacker to conduct stored XSS attacks that could lead to arbitrary JavaScript code execution (under the context of the user's session) via the Wi-Fi SSID input fields. Web scripts embedded into the vulnerable fields this way are executed immediately when a user logs into the admin page. This affects /admin/wifi/wlan1 and /admin/wifi/wlan_guest. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-31972
CVE ID: CVE-2024-31973 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-10-31T15:30:31.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hitron CODA-4582 2AHKM-CODA4589 7.2.4.5.1b8 devices allow a remote attacker within Wi-Fi proximity to conduct stored XSS attacks via the 'Network Name (SSID)' input fields to the /index.html#wireless_basic page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Hitron/CVE-2024-31973
CVE ID: CVE-2024-31974 State: PUBLISHED Published: 2024-05-17T15:36:38.054Z Last Updated: 2025-02-13T15:48:02.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.solarized.firedown (aka Solarized FireDown Browser & Downloader) application 1.0.76 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. com.solarized.firedown.IntentActivity uses a WebView component to display web content and doesn't adequately sanitize the URI or any extra data passed in the intent by any installed application (with no permissions). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/com
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/com.solarized.firedown/blob/main/CVE-2024-31974
CVE ID: CVE-2024-31975 State: PUBLISHED Published: 2024-10-30T00:00:00 Last Updated: 2024-11-04T16:46:37.618050 Vendors: n/a Products: n/a Problem Types: n/a Description: EnGenius EWS356-Fit devices through 1.1.30 allow a remote attacker to conduct stored XSS attacks via the Wi-Fi SSID parameters. JavaScript embedded into a vulnerable field is executed when the user clicks the SSID field's corresponding EDIT button. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-31975
CVE ID: CVE-2024-31976 State: PUBLISHED Published: 2024-11-27T00:00:00 Last Updated: 2024-11-29T21:02:47.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/tree/main/EnGenius/EWS356-FIT - https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-31976
CVE ID: CVE-2024-31977 State: PUBLISHED Published: 2024-07-24T00:00:00 Last Updated: 2024-09-04T14:21:20.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/actuator/cve/tree/main/AdTran/834-5 - https://drive.proton.me/urls/GXDM5T5NSG#RHa0yVWSKyoz - https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-31977 - https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulner
ob/main/AdTran/CVE-2024-31977 - https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332
CVE ID: CVE-2024-31978 State: PUBLISHED Published: 2024-04-09T08:34:44.145Z Last Updated: 2024-09-04T15:03:29.467Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SINEC NMS Problem Types: CWE-22 Description: A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under certain circumstances the downloaded files are deleted from the file system. Additional Analyst Notes: - CVE Program Container: -
rcumstances the downloaded files are deleted from the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-128433.html
CVE ID: CVE-2024-31979 State: PUBLISHED Published: 2024-07-17T09:04:47.677Z Last Updated: 2024-09-13T17:04:43.686Z Vendors: Apache Software Foundation Products: Apache StreamPipes Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0
trary address. This issue affects Apache StreamPipes: through 0.93.0. Users are recommended to upgrade to version 0.95.0, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/8lryp3bxnby9kmk13odkz2jbfdjfvf0y
CVE ID: CVE-2024-31980 State: PUBLISHED Published: 2024-05-14T10:02:27.405Z Last Updated: 2024-08-02T01:59:50.660Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Parasolid V35.1, Parasolid V36.0, Parasolid V36.1 Problem Types: CWE-787 Description: A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.256), Parasolid V36.0 (All versions < V36.0.210), Parasolid V36.1 (All versions < V36.1.185). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted X_T part file. This could allow an attacker to execute code in the context of the current process. (ZDI
pecially crafted X_T part file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-23468) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-489698.html
CVE ID: CVE-2024-31981 State: PUBLISHED Published: 2024-04-10T19:22:57.494Z Last Updated: 2024-08-13T13:37:34.850Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-862 Description: XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, remote code execution is possible via PDF export templates. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10-rc-1. If PDF templates are not typically used on the instance, an administrator can create the document `XWiki.PDFClass` and block its edition, after making sure that it does not
ce, an administrator can create the document `XWiki.PDFClass` and block its edition, after making sure that it does not contain a `style` attribute. Otherwise, there are no known workarounds aside from upgrading. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vxwr-wpjv-qjq7 - https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3 - https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73 - https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9 - https://jira.xwiki.org/browse/XWIKI-21337
CVE ID: CVE-2024-31982 State: PUBLISHED Published: 2024-04-10T19:38:01.879Z Last Updated: 2025-09-25T16:39:01.533Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-95 Description: XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a closed wiki as the database search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the w
ase search is by default accessible for all users. This impacts the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may manually apply the patch to the page `Main.DatabaseSearch`. Alternatively, unless database search is explicitly used by users, this page can be deleted as this is not the default search interface of XWiki. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-2858-8cfx-69m9 - https://github.com/xwiki/xwiki-platform/commit/3c9e4bb04286de94ad24854026a09
m/security/advisories/GHSA-2858-8cfx-69m9 - https://github.com/xwiki/xwiki-platform/commit/3c9e4bb04286de94ad24854026a09fa967538e31 - https://github.com/xwiki/xwiki-platform/commit/459e968be8740c8abc2a168196ce21e5ba93cfb8 - https://github.com/xwiki/xwiki-platform/commit/95bdd6cc6298acdf7f8f21298d40eeb8390a8565 - https://jira.xwiki.org/browse/XWIKI-21472 - https://www.vicarius.io/vsociety/posts/xwiki-rce-cve-2024-31982
CVE ID: CVE-2024-31983 State: PUBLISHED Published: 2024-04-10T19:44:48.503Z Last Updated: 2024-08-13T13:54:49.159Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-862 Description: XWiki Platform is a generic wiki platform. In multilingual wikis, translations can be edited by any user who has edit right, circumventing the rights that are normally required for authoring translations (script right for user-scope translations, wiki admin for translations on the wiki). Starting in version 4.3-milestone-2 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, this can be exploited for remote code execution if the
lestone-2 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, this can be exploited for remote code execution if the translation value is not properly escaped where it is used. This has been patched in XWiki 14.10.20, 15.5.4 and 15.10RC1. As a workaround, one may restrict edit rights on documents that contain translations. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xxp2-9c9g-7wmj - https://github.com/xwiki/xwiki-platform/commit/2a9ce88f33663c53c9c63b2ea573f4720ea2efb9 - https://github.com/xwiki/xwiki-platform/commit/73aef9648bbff04b697837f1b906932f0d5caacb - https://github.com/x
ea2efb9 - https://github.com/xwiki/xwiki-platform/commit/73aef9648bbff04b697837f1b906932f0d5caacb - https://github.com/xwiki/xwiki-platform/commit/c4c8d61c30de72298d805ccc82df2a307f131c54 - https://jira.xwiki.org/browse/XWIKI-21411
CVE ID: CVE-2024-31984 State: PUBLISHED Published: 2024-04-10T19:53:50.690Z Last Updated: 2024-08-13T13:37:31.192Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-95 Description: XWiki Platform is a generic wiki platform. Starting in version 7.2-rc-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, by creating a document with a specially crafted title, it is possible to trigger remote code execution in the (Solr-based) search in XWiki. This allows any user who can edit the title of a space (all users by default) to execute any Groovy code in the XWiki installation which compromises the confidentiality,
space (all users by default) to execute any Groovy code in the XWiki installation which compromises the confidentiality, integrity and availability of the whole XWiki installation. This has been patched in XWiki 14.10.20, 15.5.4 and 15.10 RC1. As a workaround, manually apply the patch to the `Main.SolrSpaceFacet` page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xm4h-3jxr-m3c6 - https://github.com/xwiki/xwiki-platform/commit/43c9d551e3c11e9d8f176b556dd33bbe31fc66e0 - https://github.com/xwiki/xwiki-platform/commit/5ef9d294d37be92ee22b2549e38663b29dce8767 - https://github.com/xwiki/xw
- https://github.com/xwiki/xwiki-platform/commit/5ef9d294d37be92ee22b2549e38663b29dce8767 - https://github.com/xwiki/xwiki-platform/commit/74e301c481e69eeea674dac7fed6af3614cf08c5 - https://github.com/xwiki/xwiki-platform/commit/94fc12db87c2431eb1335ecb9c2954b1905bde62 - https://github.com/xwiki/xwiki-platform/commit/acba74c149a041345b24dcca52c586f872ba97fb - https://github.com/xwiki/xwiki-platform/commit/ef55105d6eeec5635fd693f0070c5aaaf3bdd940 - https://jira.xwiki.org/browse/XWIKI-21471
CVE ID: CVE-2024-31985 State: PUBLISHED Published: 2024-04-10T20:11:53.091Z Last Updated: 2024-08-02T01:59:50.770Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-352 Description: XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, it is possible to schedule/trigger/unschedule existing jobs by having an admin visit the Job Scheduler page through a predictable URL, for example by embedding such an URL in any content as an image. The vulnerability has been fixed in XWiki 14.10.19, 15.5.5, and 15.9. As a workaround, manually apply the patch by
mage. The vulnerability has been fixed in XWiki 14.10.19, 15.5.5, and 15.9. As a workaround, manually apply the patch by modifying the `Scheduler.WebHome` page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-j2r6-r929-v6gf - https://github.com/xwiki/xwiki-platform/commit/8a92cb4bef7e5f244ae81eed3e64fe9be95827cf - https://github.com/xwiki/xwiki-platform/commit/efd3570f3e5e944ec0ad0899bf799bf9563aef87 - https://github.com/xwiki/xwiki-platform/commit/f16ca4ef1513f84ce2e685d4a05d689bd3a2ab4c - https://github.com/xwiki/xwiki-platform/commit/f30d9c641750a3f034b5910c6a3a7724ae8f2269 - https:/
85d4a05d689bd3a2ab4c - https://github.com/xwiki/xwiki-platform/commit/f30d9c641750a3f034b5910c6a3a7724ae8f2269 - https://jira.xwiki.org/browse/XWIKI-20851
CVE ID: CVE-2024-31986 State: PUBLISHED Published: 2024-04-10T20:27:29.600Z Last Updated: 2024-08-02T01:59:50.842Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-352, CWE-95 Description: XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, by creating a document with a special crafted documented reference and an `XWiki.SchedulerJobClass` XObject, it is possible to execute arbitrary code on the server whenever an admin visits the scheduler page or the scheduler page is referenced, e.g., via an image in a comment on a page in the wiki. The
sits the scheduler page or the scheduler page is referenced, e.g., via an image in a comment on a page in the wiki. The vulnerability has been fixed in XWiki 14.10.19, 15.5.5, and 15.9. As a workaround, apply the patch manually by modifying the `Scheduler.WebHome` page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-37m4-hqxv-w26g - https://github.com/xwiki/xwiki-platform/commit/8a92cb4bef7e5f244ae81eed3e64fe9be95827cf - https://github.com/xwiki/xwiki-platform/commit/efd3570f3e5e944ec0ad0899bf799bf9563aef87 - https://github.com/xwiki/xwiki-platform/commit/f30d9c641750a3f034b5910c6a3a77
efd3570f3e5e944ec0ad0899bf799bf9563aef87 - https://github.com/xwiki/xwiki-platform/commit/f30d9c641750a3f034b5910c6a3a7724ae8f2269 - https://jira.xwiki.org/browse/XWIKI-21416
CVE ID: CVE-2024-31987 State: PUBLISHED Published: 2024-04-10T20:32:39.317Z Last Updated: 2024-08-20T18:00:36.216Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-862 Description: XWiki Platform is a generic wiki platform. Starting in version 6.4-milestone-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, any user who can edit any page like their profile can create a custom skin with a template override that is executed with programming right, thus allowing remote code execution. This has been patched in XWiki 14.10.19, 15.5.4 and 15.10RC1. No known workarounds are available except for upgrading. Addi
s has been patched in XWiki 14.10.19, 15.5.4 and 15.10RC1. No known workarounds are available except for upgrading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-cv55-v6rw-7r5v - https://github.com/xwiki/xwiki-platform/commit/3d4dbb41f52d1a6e39835cfb1695ca6668605a39 - https://github.com/xwiki/xwiki-platform/commit/626d2a5dbf95b4e719ae13bf1a0a9c76e4edd5a2 - https://github.com/xwiki/xwiki-platform/commit/da177c3c972e797d92c1a31e278f946012c41b56 - https://jira.xwiki.org/browse/XWIKI-21478
CVE ID: CVE-2024-31988 State: PUBLISHED Published: 2024-04-10T20:40:36.954Z Last Updated: 2025-02-21T17:03:40.838Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-352 Description: XWiki Platform is a generic wiki platform. Starting in version 13.9-rc-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, when the realtime editor is installed in XWiki, it allows arbitrary remote code execution with the interaction of an admin user with programming right. More precisely, by getting an admin user to either visit a crafted URL or to view an image with this URL that could be in a comment, the attacker can get