VDB
CVE-2024-55879
CVE-2024-55879
PUBLISHED
Es besteht eine Schwachstelle in xwiki. Dieser Fehler existiert wegen einer unsachgemäßen Zugriffskontrolle in der Komponente ConfigurableClass. Ein entfernter authentifizierter Angreifer mit Skriptrechten kann diese Schwachstelle ausnutzen, um beliebigen Code auszuführen.
EPSS 20.02% · 95.6th percentile
Risk Scores
EPSS Score
20.02%
95.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source xwiki <14.3-rc-1 | |
| Open Source | Open Source xwiki <13.10.5 | |
| Open Source | Open Source xwiki <15.10.9 | |
| Open Source | Open Source xwiki <16.3.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Dec 12, 2024 CVE Published
- Dec 12, 2024 PoC Published
- Dec 13, 2024 EPSS Score
- Jan 15, 2025 EPSS Score
- Feb 1, 2025 EPSS Score
- Mar 6, 2025 EPSS Score
- Mar 17, 2025 EPSS Score
- Mar 26, 2025 EPSS Score
- Apr 2, 2025 Coalition ESS Score
- Apr 9, 2025 EPSS Score
- Apr 13, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3695.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3695 advisory
- https://github.com/advisories/GHSA-2r87-74cx-2p7c advisory
- https://github.com/advisories/GHSA-cwq6-mjmx-47p6 advisory
- https://github.com/advisories/GHSA-j2pq-22jj-4pm5 advisory
- https://github.com/advisories/GHSA-r279-47wg-chpr advisory
- https://github.com/advisories/GHSA-wh34-m772-5398 advisory