CVE-2023-46244

Summary

CVE-2023-46244 is a vulnerability affecting the XWiki Platform, a wiki solution that provides runtime services for applications. In affected versions, users can potentially execute Velocity scripts with the rights of any document content author, granting unintended access to the XWiki.superadmin title. This security flaw has been addressed in XWiki versions 14.10.7 and 15.2RC1, and users are strongly advised to upgrade as soon as possible. There are currently no known workarounds for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.