CVE-2023-35166 — Privilege escalation (PR) from account through TipsPanel
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPane…
Published: 2023-06-20 · CVSS: 10.0 · CVSS 3.1
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7