CVE-2023-26473

PoC ×2—

CVSS 3.1

6.5 medium

EPSS

<1%p49

Published

Mar 2, 2023 (Mar 2, 2023)

Modified

Jun 17, 2026

Description

XWiki Platform is a generic wiki platform. Starting in version 1.3-rc-1, any user with edit right can execute arbitrary database select and access data stored in the database. The problem has been patched in XWiki 13.10.11, 14.4.7, and 14.10. There is no workaround for this vulnerability other than upgrading.

Vendors: xwiki
Products: xwiki
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.