Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-21047

Warning related to a missing CSRF token in wiki section editing

    XMLWordPrintable

Details

    • Unknown
    • N/A
    • N/A

    Description

      To reproduce, you have to set the "Text" editor in the profile as default (or WYSIWYG) make section edit button just a shortcut for the page edit in-place.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-20386 CSRF privilege escalation/RCE via the edit action

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              tmortagne Thomas Mortagne
              tmortagne Thomas Mortagne
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: