Security Advisory

CVE-2024-52299

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-11-13 15:29:07

Last updated 2024-11-14 13:58:59

Assigner GitHub_M

State PUBLISHED

Description

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment stored in the wiki as the "key" that is passed to prevent this is computed incorrectly, calling skip on the digest stream doesnt update the digest. This is fixed in 2.5.6.

← Browse all CVEs View on cve.org ↗