VDB
CVE-2024-55877
CVE-2024-55877
PUBLISHED
Es besteht eine Schwachstelle in xwiki. Dieser Fehler existiert wegen unsachgemäßer Zugriffskontrolle in der Komponente WikiMacroClass. Ein entfernter authentifizierter Angreifer kann diese Schwachstelle zur Ausführung von beliebigem Code ausnutzen.
EPSS 33.39% · 97.0th percentile
Risk Scores
EPSS Score
33.39%
97.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source xwiki <15.10.9 | |
| Open Source | Open Source xwiki <14.3-rc-1 | |
| Open Source | Open Source xwiki <16.3.0 | |
| Open Source | Open Source xwiki <15.10.11 | |
| Open Source | Open Source xwiki <16.4.1 | |
| Open Source | Open Source xwiki <13.10.5 |
Timeline
- Jan 21, 1970 Security Advisory
- Dec 12, 2024 CVE Published
- Dec 12, 2024 PoC Published
- Dec 13, 2024 EPSS Score
- Jan 15, 2025 EPSS Score
- Feb 1, 2025 EPSS Score
- Mar 6, 2025 EPSS Score
- Mar 17, 2025 EPSS Score
- Mar 26, 2025 EPSS Score
- Apr 2, 2025 Coalition ESS Score
- Apr 9, 2025 EPSS Score
- Apr 13, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3695.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3695 advisory
- https://github.com/advisories/GHSA-2r87-74cx-2p7c advisory
- https://github.com/advisories/GHSA-cwq6-mjmx-47p6 advisory
- https://github.com/advisories/GHSA-j2pq-22jj-4pm5 advisory
- https://github.com/advisories/GHSA-r279-47wg-chpr advisory
- https://github.com/advisories/GHSA-wh34-m772-5398 advisory