CVE-2023-29207: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

April 12, 2023

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in org.xwiki.platform:xwiki-platform-web-templates.

References

github.com/advisories/GHSA-6vgh-9r3c-2cxp
github.com/xwiki/xwiki-platform/commit/65ca06c51e7a1d5a579344c7272b2cc9a9a21126
github.com/xwiki/xwiki-platform/security/advisories/GHSA-6vgh-9r3c-2cxp
jira.xwiki.org/browse/XWIKI-15205

Detect and mitigate CVE-2023-29207 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →