application-admintools vulnerabilities

2 known vulnerabilities in application-admintools from Xwiki-contrib. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  application-admintools: Cross-Site Request Forgery

  CVE-2023-48293Nov 20, 2023Xwiki-contrib

  The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the query on XWiki tool allows executing arbitrary database queries on the database of the XWiki install

• 8.8 High severity

  application-admintools: Cross-Site Request Forgery

  CVE-2023-48292Nov 20, 2023Xwiki-contribEPSS 22.9%

  The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacker