CVE:CVE-2023-29528
CNNVD:CNNVD-202304-1719
XWiki Commons是法国XWiki基金会的其他几个顶级 XWiki 项目共有的技术库。
XWiki Commons存在跨站脚本漏洞。攻击者利用该漏洞可以注入任意HTML代码。
solution:Upgrade xwiki commons to a higher version than 14.10,4.2,4.2:milestone1,4.2:milestone2,4.2:milestone3,4.2:rc1,and avoid the version [4.3,14.10),4.2,4.2:milestone1,4.2:milestone2,4.2:milestone3,4.2:rc1