xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
CVE-2023-37909 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.1-rc-1 and prior to ver...

📅 2023-10-25
CVSS 9.9 Dossier →
CVE-2023-37908 CRITICAL
Component: xwiki-rendering

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHT...

📅 2023-10-25
CVSS 9.0 Dossier →
CVE-2023-45144 CRITICAL
Component: oauth_identity

com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user l...

📅 2023-10-16
CVSS 10.0 Dossier →
CVE-2023-45138 CRITICAL
Component: change_request

Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Starting in version 0.11 and prio...

📅 2023-10-12
CVSS 10.0 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible in XWiki to execute Velocity c...

📅 2023-09-01
CVSS 6.3 Dossier →
CVE-2023-40573 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain Gr...

📅 2023-08-24
CVSS 9.0 Dossier →
CVE-2023-40572 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF att...

📅 2023-08-24
CVSS 9.0 Dossier →
CVE-2023-40177 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can use the content field...

📅 2023-08-23
CVSS 9.9 Dossier →
CVE-2023-40176 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS ...

📅 2023-08-23
CVSS 9.0 Dossier →
CVE-2023-37914 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can view `Invitation.WebHome` ca...

📅 2023-08-17
CVSS 9.9 Dossier →
CVE-2023-37462 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `SkinsCode....

📅 2023-07-14
CVSS 9.9 Dossier →
CVE-2023-37277 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API allows executing all actions via...

📅 2023-07-10
CVSS 9.6 Dossier →
CVE-2023-36477 CRITICAL
Component: ckeditor_integration

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights can edit all pages ...

📅 2023-06-30
CVSS 9.0 Dossier →
CVE-2023-36470 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existi...

📅 2023-06-29
CVSS 9.9 Dossier →
CVE-2023-36469 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile ...

📅 2023-06-29
CVSS 9.9 Dossier →
CVE-2023-36468 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki installation is upgraded and th...

📅 2023-06-29
CVSS 9.9 Dossier →
CVE-2023-36471 CRITICAL
Component: commons

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed...

📅 2023-06-29
CVSS 9.0 Dossier →
CVE-2023-35162 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload...

📅 2023-06-23
CVSS 9.6 Dossier →
CVE-2023-35161 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload...

📅 2023-06-23
CVSS 9.6 Dossier →
CVE-2023-35160 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload...

📅 2023-06-23
CVSS 9.6 Dossier →
CVE-2023-35159 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload...

📅 2023-06-23
CVSS 9.6 Dossier →
CVE-2023-35158 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload...

📅 2023-06-23
CVSS 9.6 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to perform an XSS by forging a ...

📅 2023-06-23
CVSS 8.4 Dossier →
CVE-2023-35156 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload...

📅 2023-06-23
CVSS 9.6 Dossier →
Page 6 of 12 (282 Total Records)