WRITEUP
WRITEUP
Exploit for CVE-2023-37911
- Xwiki < 14.10.8 - Exposure to Wrong Actor
AI Analysis
This patch addresses CVE-2023-37911 by adding authorization checks to the document revision provider in XWiki's script API. The fix ensures that users must have VIEW rights to access document revisions, preventing unauthorized access to historical document content.
Attack Type
auth_bypass
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
Click anywhere or press Esc to close