-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.xwiki.platform:xwiki-platform-icon-ui | maven | >= 6.2-milestone-1, < 13.10.10 | 13.10.10 |
| org.xwiki.platform:xwiki-platform-icon-ui | maven | >= 14.0, < 14.4.6 | 14.4.6 |
| org.xwiki.platform:xwiki-platform-icon-ui | maven | >= 14.5, < 14.9 | 14.9 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper output escaping in IconThemeSheet's template. The unpatched version used {{{ $doc.content.replace('}}}', '~}}}') }}} which insufficiently sanitized content. This allowed attackers to inject async macros containing executable code (like groovy) that would execute with the sheet's privileges. The patch introduced proper rendering escape via $services.rendering.escape, confirming the vulnerability was in content rendering logic. While the async macro enables exploitation, the root vulnerability is in IconThemeSheet's output handling.
Ongoing coverage of React2Shell