Security Advisory

CVE-2024-42489

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-12 15:49:18

Last updated 2024-08-13 20:43:35

Assigner GitHub_M

State PUBLISHED

Description

Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit or comment right on any page to perform remote code execution. Other macros like Viewppt are vulnerable to the same kind of attack. This vulnerability is fixed in 1.10.1.

← Browse all CVEs View on cve.org ↗