AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-29204

MEDIUM · CVSS 4.7 EPSS 1.76% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-04-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-29204
Severity
MEDIUM
CVSS
4.7
EPSS
1.76%

Original NVD Description

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as `//mydomain.com` (i.e. omitting the `http:`). It was also possible to bypass it when using URL such as `http:/mydomain.com`. The problem has been patched on XWiki 13.10.10, 14.4.4 and 14.8RC1.