• caglararli@hotmail.com
  • 05386281520

CVE-2024-31984 | XWiki xwiki-platform-search-solr-ui Space Title neutralization of directives

Çağlar Arlı      -    5 Views

CVE-2024-31984 | XWiki xwiki-platform-search-solr-ui Space Title neutralization of directives

A vulnerability, which was classified as critical, was found in XWiki xwiki-platform-search-solr-ui. Affected is an unknown function of the component Space Title Handler. The manipulation leads to improper neutralization of directives in dynamically evaluated code ('eval injection'). This vulnerability is traded as CVE-2024-31984. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.