CVE-2023-50732: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

December 19, 2023

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in org.xwiki.platform:xwiki-platform-index-tree-macro.

References

github.com/advisories/GHSA-p5f8-qf24-24cj
github.com/xwiki/xwiki-platform/commit/41d7dca2d30084966ca6a7ee537f39ee8354a7e3
github.com/xwiki/xwiki-platform/security/advisories/GHSA-p5f8-qf24-24cj
jira.xwiki.org/browse/XWIKI-20625

Detect and mitigate CVE-2023-50732 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →