Details
-
Bug
-
Resolution: Fixed
-
Blocker
-
15.2-rc-1, 14.10.7
-
Windows 11 Pro, Firefox 111, using a local instance of XWiki 14.10.7 on PostgreSQL 15, Tomcat 9.0.73
-
Unknown
-
N/A
-
N/A
-
Description
Steps to reproduce
- Login as Admin
- Go to Administer Wiki > Look & Feel > Image Styles
- Fill a New Image Style name
- Click "Create the image style"
Expected results
No warning is displayed on the top of the page.
Actual results
The following warning is displayed:
Warning: For security reasons, the content of the edited document is executed in restricted mode, as the edit was not initiated by a validated request. There may be unexpected errors due to this
Attachments
Issue Links
- relates to
-
XWIKI-20386 CSRF privilege escalation/RCE via the edit action
- Closed