Andrew LevkininSystem WeaknessXwiki authenticated server side code execution without programming rightsCVE-2020–11057Feb 7, 2020Feb 7, 2020