Junglewise Threat Intelligence

CVE-2022-23620: Path traversal in xwiki-platform-skin-skinx

CVE-2022-23620 · Severity: low · CVSS 3.1 · Published 2022-02-09

Technologies: org.xwiki.platform:xwiki-platform-skin-skinx (Maven). Vendors: Maven.

Executive brief

Path traversal in xwiki-platform-skin-skinx

Affected products

Maven org.xwiki.platform:xwiki-platform-skin-skinx

Related threats

XWiki configuration files can be accessed through jsx and sx endpoints
org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins