xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
CVE-2023-29519 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A registered user can perform remote code exe...

📅 2023-04-19
CVSS 9.0 Dossier →
CVE-2023-29518 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitra...

📅 2023-04-19
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The office document viewer macro was allowing...

📅 2023-04-19
CVSS 7.5 Dossier →
CVE-2023-29516 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on `XWiki.Attachmen...

📅 2023-04-19
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can create a space can become ad...

📅 2023-04-19
CVSS 7.7 Dossier →
CVE-2023-29514 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e....

📅 2023-04-19
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's...

📅 2023-04-19
CVSS 5.0 Dossier →
CVE-2023-29512 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., it...

📅 2023-04-19
CVSS 9.9 Dossier →
CVE-2023-29510 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add translations tha...

📅 2023-04-19
CVSS 9.9 Dossier →
CVE-2023-29213 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of `org.xwiki.platform:x...

📅 2023-04-17
CVSS 9.0 Dossier →
CVE-2023-30537 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with the right to add an object on a...

📅 2023-04-16
CVSS 9.9 Dossier →
CVE-2023-29511 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., it...

📅 2023-04-16
CVSS 9.9 Dossier →
CVE-2023-29509 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents can...

📅 2023-04-16
CVSS 9.9 Dossier →
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can introduce a stored XSS by usi...

📅 2023-04-16
CVSS 8.9 Dossier →
CVE-2023-29507 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. The Document script API returns directly a DocumentAuthors all...

📅 2023-04-16
CVSS 9.1 Dossier →
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some code using the URL of authentic...

📅 2023-04-16
CVSS 5.4 Dossier →
CVE-2023-29214 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Python...

📅 2023-04-16
CVSS 9.9 Dossier →
CVE-2023-29212 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Python...

📅 2023-04-16
CVSS 9.9 Dossier →
CVE-2023-29211 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights `WikiManager.DeleteWiki` can execute...

📅 2023-04-16
CVSS 9.9 Dossier →
CVE-2023-29210 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents inc...

📅 2023-04-15
CVSS 9.9 Dossier →
CVE-2023-29209 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents inc...

📅 2023-04-15
CVSS 9.9 Dossier →
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for view...

📅 2023-04-15
CVSS 7.5 Dossier →
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing column names, ...

📅 2023-04-15
CVSS 8.9 Dossier →
CVE-2023-29206 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. There was no check in the author of a JavaScript xobject or St...

📅 2023-04-15
CVSS 9.0 Dossier →
Page 8 of 12 (282 Total Records)