xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload...

📅 2023-06-23
CVSS 8.8 Dossier →
CVE-2023-35153 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 5.4.4 and prior to versions 14.4.8, 14.10.4, and 15.0, a stored cross-site scripting vu...

📅 2023-06-23
CVSS 9.0 Dossier →
CVE-2023-35152 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in user can add d...

📅 2023-06-23
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a RES...

📅 2023-06-23
CVSS 7.5 Dossier →
CVE-2023-35150 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to vers...

📅 2023-06-23
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscat...

📅 2023-06-23
CVSS 7.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.0-milestone-1 and prior...

📅 2023-06-23
CVSS 4.3 Dossier →
CVE-2023-34465 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, `Mail.MailConfig` can be edi...

📅 2023-06-23
CVSS 9.9 Dossier →
CVE-2023-34464 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.2.1 until versions 14.4...

📅 2023-06-23
CVSS 9.0 Dossier →
CVE-2023-35166 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content wit...

📅 2023-06-20
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible to...

📅 2023-05-15
CVSS 4.7 Dossier →
CVE-2023-32070 CRITICAL
Component: rendering

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This all...

📅 2023-05-10
CVSS 9.0 Dossier →
CVE-2023-32071 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible to...

📅 2023-05-09
CVSS 9.0 Dossier →
CVE-2023-32069 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user t...

📅 2023-05-09
CVSS 9.9 Dossier →
CVE-2023-31126 CRITICAL
Component: xwiki

`org.xwiki.commons:xwiki-commons-xml` is an XML library used by the open-source wiki platform XWiki. The HTML sanitizer, introduced in version 14.6-rc...

📅 2023-05-09
CVSS 9.0 Dossier →
CVE-2023-29528 CRITICAL
Component: commons

XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced...

📅 2023-04-20
CVSS 9.0 Dossier →
CVE-2023-29527 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions a user without script or...

📅 2023-04-19
CVSS 9.9 Dossier →
CVE-2023-29526 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to display...

📅 2023-04-19
CVSS 9.9 Dossier →
CVE-2023-29525 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to cod...

📅 2023-04-19
CVSS 9.9 Dossier →
CVE-2023-29524 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything with the ri...

📅 2023-04-19
CVSS 9.9 Dossier →
CVE-2023-29523 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile ...

📅 2023-04-19
CVSS 9.9 Dossier →
CVE-2023-29522 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitra...

📅 2023-04-19
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitra...

📅 2023-04-19
CVSS 8.4 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations comi...

📅 2023-04-19
CVSS 4.3 Dossier →
Page 7 of 12 (282 Total Records)