-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the deletespace.vm template directly using the xredirect parameter value in a URL context without proper sanitization. The commit diff shows the patched version replaces the unsafe assignment with #getSanitizedURLAttributeValue, a macro introduced to validate URLs. The unpatched code's line '#set ($cancelURL = $request.xredirect)' allowed arbitrary JavaScript execution when the parameter value started with 'javascript:'. This matches the XSS pattern described in CWE-79 and CWE-87.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.xwiki.platform:xwiki-platform-web-templates | maven | >= 3.4-milestone-1, < 14.10.5 | 14.10.5 |
| org.xwiki.platform:xwiki-platform-web-templates | maven | >= 15.0-rc-1, < 15.1-rc-1 | 15.1-rc-1 |
JavaJavaOngoing coverage of React2Shell