Details
-
Bug
-
Resolution: Solved By
-
Critical
-
1.1.2
-
Windows 11 Pro, Chrome 117, using a local instance of XWiki 15.5.2 on Jetty/HSQLDB
-
Unknown
-
Description
Steps to reproduce
- Go to Administer Wiki > Extensions > Extensions
- Install MathJax Macro 1.1.2 through Extensions Manager
- Go to Administer Wiki > Extensions > Security Vulnerabilities
- Insert a Scan Delay number under the Configuration section (e.g. 1)
- Click 'Save'
Expected results
No security vulnerabilities are found.
Actual results
A security vulnerability is found having the Extension Id:
org.codehaus.plexus:plexus-archiver/4.5.0
Here is the link to the CVE ID: https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m
Attachments
Issue Links
- duplicates
-
LATEX-144 Upgrade to Plexus Archiver 4.8.0
-
- Closed
-
-
MATHJAX-30 Upgrade to LaTeX Syntax 1.25
-
- Closed
-