CVE-2006-7223: Medium severity xwiki xwiki vulnerability
PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose author has programming rights, modifying this document to contain a script, and previewing without saving the document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7223?
CVE-2006-7223 is considered a critical vulnerability due to the ability of remote authenticated users to execute arbitrary code.
How do I fix CVE-2006-7223?
To fix CVE-2006-7223, upgrade to XWiki version 1.0B1 or later.
What versions of XWiki are affected by CVE-2006-7223?
CVE-2006-7223 affects XWiki versions from 0.9.543 to 0.9.1252.
What is the impact of CVE-2006-7223?
The impact of CVE-2006-7223 allows unauthorized users to modify documents and potentially execute malicious code.
Is XWiki the only software affected by CVE-2006-7223?
Yes, XWiki is the only software affected by CVE-2006-7223 as it specifically targets its platform.