Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-19292

XSS in wiki manager join wiki page

    XMLWordPrintable

Details

    • Unknown
    • N/A
    • N/A

    Description

      The URL parameter "requestJoin" is inserted in the form without any XML escaping.

      Attachments

        Issue Links

          is caused by

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-9516 Create a new Wiki API that replaces xwiki-platform-wiki-manager and xwiki-platform-workspace

          • Major - Major loss of function.
          • Closed
          links to

          Web Link GitHub Security advisory

          Activity

            People

              tmortagne Thomas Mortagne
              tmortagne Thomas Mortagne
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: