XWiki Platform before 12.8 mishandles escaping in the property displayer.
References
Link | Resource |
---|---|
https://cve.nstsec.com/cve-2020-13654 | |
https://github.com/xwiki/xwiki-platform/compare/xwiki-platform-12.7.1...xwiki-platform-12.8 | Third Party Advisory |
https://github.com/xwiki/xwiki-platform/pull/1315 | Third Party Advisory |
https://jira.xwiki.org/browse/XWIKI-17374 | Issue Tracking Permissions Required Third Party Advisory |
Configurations
History
02 May 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
13 Aug 2023, 21:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
05 Jan 2021, 21:15
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://github.com/xwiki/xwiki-platform/pull/1315 - Third Party Advisory | |
References | (MISC) https://github.com/xwiki/xwiki-platform/compare/xwiki-platform-12.7.1...xwiki-platform-12.8 - Third Party Advisory | |
References | (MISC) https://jira.xwiki.org/browse/XWIKI-17374 - Issue Tracking, Permissions Required, Third Party Advisory | |
CPE | cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
CWE | CWE-116 |
31 Dec 2020, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2020-12-31 01:15
Updated : 2024-05-02 17:15
NVD link : CVE-2020-13654
Mitre link : CVE-2020-13654
CVE.ORG link : CVE-2020-13654
JSON object : View
Products Affected
xwiki
- xwiki
CWE
CWE-116
Improper Encoding or Escaping of Output