-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper output encoding in error messages displayed during attachment deletion. The commit diff shows the fix added XMLUtils.escape() to the localizePlainOrKey method, which handles translation strings. This indicates the function previously returned raw user-controlled attachment names without sanitization. The XSS occurs when these names are reflected in error messages (e.g., 'Failed to delete attachment [name]') without proper escaping. The test case added in AttachmentIT.java with an '<img>' payload confirms the attack vector involved attachment name injection in delattachment action responses.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.xwiki.platform:xwiki-platform-oldcore | maven | >= 3.2-milestone-3, < 14.10.6 | 14.10.6 |
| org.xwiki.platform:xwiki-platform-oldcore | maven | >= 15.0-rc-0, < 15.1-rc-1 | 15.1-rc-1 |
A Semantic Attack on Google Gemini - Read the Latest Research