Change Request

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-49280 Dec 04, 23:15 Maven MEDIUM POC PATCH This Month

XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the changes. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Information Disclosure Xwiki Change Request

NVD GitHub

CVSS 3.1

6.5

EPSS

0.9%

CVE-2023-45138 Oct 12, 17:15 Maven CRITICAL PATCH Act Now

Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS RCE Xwiki Change Request

NVD GitHub

CVSS 3.1

9.6

EPSS

71.2%

CVE-2023-49280 Maven

EPSS 1% CVSS 6.5

MEDIUM POC PATCH This Month

Information Disclosure Xwiki Change Request

NVD GitHub

CVE-2023-45138 Maven

EPSS 71% CVSS 9.6

CRITICAL PATCH Act Now

XSS RCE Xwiki +1

NVD GitHub