CVE-2020-11057 — Code Injection in XWiki Platform
In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. Th…
Published: 2020-05-12 · CVSS: 9.9 · CVSS 3.1
In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. This has been fixed 11.3.7 , 11.10.3 and 12.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7