Description
XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| xwiki-platform | xwiki / xwiki-platform | >= 16.0.0-rc-1, < 16.4.1 | affected |
| xwiki-platform | xwiki / xwiki-platform | >= 5.3-milestone-2, < 15.10.11 | affected |