Zero Day Initiative — CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Data Code Injection - T1540 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID d4acb172-a6bb-4eac-af78-f9f91516d851
Fingerprint b6fb519dd853cbc1
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 22, 2023, midnight
Added to db Nov. 19, 2023, 3:40 a.m.
Last updated Oct. 15, 2024, 10:13 p.m.
Headline CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki
Title Zero Day Initiative — CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki
Detected Hints/Tags/Attributes 27/2/5
Source URLs
Redirection Url
Details Source https://www.thezdi.com/blog/2023/8/22/cve-2023-35150-arbitrary-code-injection-in-xwikiorg-xwiki
URL Provider
Details Provider Source level domain
Details thezdi.com www.thezdi.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 400 ✔ Zero Day Initiative - Blog https://www.zerodayinitiative.com/blog/?format=rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 3 
cve-2023-35150
Details Domain 2 
xwiki.org
Details Domain 13 
go.trendmicro.com
Details File 1 
invitationguestactions.xml
Details Url 11 
http://go.trendmicro.com/tis/.