Details
-
New Feature
-
Resolution: Fixed
-
Major
-
4.3
-
None
-
None
-
Unknown
-
Description
It's possible, from groovy, to run a command line that would be executed on the underlying (unix) server running the wiki - see https://snippets.xwiki.org/xwiki/bin/view/Extension/Run%20Shell%20Command .
This tool should be included in the Admin tools, as it's very useful for debugging/diagnosing an instance.
Attachments
Issue Links
- causes
-
ADMINTOOL-91 Run Shell Command allows CSRF RCE attacks
- Closed