xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
CVE-2023-29205 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systematically perform a proper neutra...

📅 2023-04-15
CVSS 9.9 Dossier →
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in...

📅 2023-04-15
CVSS 4.7 Dossier →
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable...

📅 2023-04-15
CVSS 3.7 Dossier →
CVE-2023-29202 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. The RSS macro that is bundled in XWiki included the content of...

📅 2023-04-15
CVSS 9.0 Dossier →
CVE-2023-29201 CRITICAL
Component: xwiki

XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced...

📅 2023-04-15
CVSS 9.0 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right...

📅 2023-03-07
CVSS 7.7 Dossier →
CVE-2023-27479 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with view right...

📅 2023-03-07
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.2-m3, users can deduce the content of the password fields by repeated call to `LiveTa...

📅 2023-03-02
CVSS 7.5 Dossier →
CVE-2023-26475 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted ...

📅 2023-03-02
CVSS 9.9 Dossier →
CVE-2023-26474 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 13.10, it's possible to use the right of an existing document content author to execute...

📅 2023-03-02
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 1.3-rc-1, any user with edit right can execute arbitrary database select and access dat...

📅 2023-03-02
CVSS 6.5 Dossier →
CVE-2023-26472 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 6.2-milestone-1, one can execute any wiki content with the right of IconThemeSheet auth...

📅 2023-03-02
CVSS 9.9 Dossier →
CVE-2023-26471 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 11.6-rc-1, comments are supposed to be executed with the right of superadmin but in res...

📅 2023-03-02
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make the farm unusable by ad...

📅 2023-03-02
CVSS 5.7 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.0-milestone-1, it's possible to execute a script with the right of another user, prov...

📅 2023-03-02
CVSS 5.4 Dossier →
CVE-2023-26055 CRITICAL
Component: commons

XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their o...

📅 2023-03-02
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 12.10, a user without script rights can introduce a stored cross-site scripting by usin...

📅 2023-03-02
CVSS 8.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 6.0, users with write rights can insert well-formed content that is not handled well by...

📅 2023-03-02
CVSS 6.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 14.3-rc-1, `org.xwiki.store.script.TemporaryAttachmentsScriptService#uploadTemporaryAtt...

📅 2023-03-02
CVSS 6.6 Dossier →
CVE-2023-26477 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and 6.2.4, it's possible to inject arbitrary wiki syntax including Groovy, Py...

📅 2023-03-02
CVSS 10.0 Dossier →
CVE-2023-22457 CRITICAL
Component: ckeditor_integration

CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document lacked a p...

📅 2023-01-04
CVSS 9.0 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When the `reset a forgotten password` feature...

📅 2022-11-23
CVSS 6.2 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to make XWiki create many new s...

📅 2022-11-23
CVSS 7.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users without the right to view documents can...

📅 2022-11-23
CVSS 5.3 Dossier →
Page 9 of 12 (282 Total Records)