Vulnerability index

Browse CVEs

258 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Pdf Viewer Macro HIGH 7.5
CVE-2024-52298

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Deleg…

Fix: 2.5.6+
Fix from $1,950 2024-11-13
Pdf Viewer Macro HIGH 7.5
CVE-2024-52299

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment st…

Fix: 2.5.6+
Fix from $1,950 2024-11-13
Xwiki MEDIUM 5.3
CVE-2024-46979

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification …

Fix: 14.10.21 / 15.5.5+
Fix from $1,600 2024-09-18
Xwiki MEDIUM 6.5
CVE-2024-46978

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of…

Fix: 14.10.21 / 15.5.5+
Fix from $1,600 2024-09-18
Xwiki MEDIUM 5.3
CVE-2024-45591

XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed in…

Fix: 15.10.9 / 16.3.0+
Fix from $1,600 2024-09-10
Xwiki HIGH 8.0
CVE-2024-43401

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can …

Fix: after 15.9
Fix from $1,950 2024-08-19
Xwiki MEDIUM 5.4
CVE-2024-43400

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible for a user without Script or …

Fix: 14.10.21 / 15.5.5+
Fix from $1,600 2024-08-19
Pro Macros HIGH 8.8
CVE-2024-42489

Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` pag…

Fix: 1.10.1+
Fix from $1,950 2024-08-12
Xwiki MEDIUM 5.4
CVE-2024-41947

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a conflict when another user wit…

Fix: 15.10.8 / 16.3.0+
Fix from $1,600 2024-07-31
Xwiki HIGH 8.8
CVE-2024-37901

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit right on any page can per…

Fix: 14.10.21 / 15.5.5+
Fix from $1,950 2024-07-31
Xwiki HIGH 8.0
CVE-2024-37899

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin disables a user account, the u…

Fix: 14.10.21 / 15.5.5+
Fix from $1,950 2024-06-20
Xwiki HIGH 8.8
CVE-2024-31997EPSS 74%

XWiki Platform is a generic wiki platform. Prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, parameters of UI extensions are always interpreted as V…

Fix: 14.10.19 / 15.5.4+
Fix from $1,950 2024-04-10
Xwiki CRITICAL 9.8
CVE-2024-31996

XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, the HTML escaping of esca…

Fix: 14.10.19 / 15.5.4+
Fix from $2,300 2024-04-10
Xwiki HIGH 8.8
CVE-2024-31987

XWiki Platform is a generic wiki platform. Starting in version 6.4-milestone-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, any user who ca…

Fix: 14.10.19 / 15.5.4+
Fix from $1,950 2024-04-10
Xwiki HIGH 8.8
CVE-2024-31988

XWiki Platform is a generic wiki platform. Starting in version 13.9-rc-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, when the realtime edi…

Fix: 14.10.19 / 15.5.4+
Fix from $1,950 2024-04-10
Xwiki HIGH 8.8
CVE-2024-31986

XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, by creating a document with…

Fix: 14.10.19 / 15.5.4+
Fix from $1,950 2024-04-10
Xwiki MEDIUM 5.4
CVE-2024-31985

XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, it is possible to schedule/…

Fix: 14.10.19 / 15.5.4+
Fix from $1,600 2024-04-10
Xwiki CRITICAL 9.8
CVE-2024-31982EPSS 34%

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's databas…

Fix: 14.10.20 / 15.5.4+
Fix from $2,300 2024-04-10
Xwiki HIGH 8.8
CVE-2024-31981

XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, remote code execution is …

Fix: 14.10.19 / 15.5.4+
Fix from $1,950 2024-04-10
Xwiki HIGH 8.8
CVE-2024-31983

XWiki Platform is a generic wiki platform. In multilingual wikis, translations can be edited by any user who has edit right, circumventing the rights…

Fix: 14.10.20 / 15.5.4+
Fix from $1,950 2024-04-10
Xwiki HIGH 8.8
CVE-2024-31984EPSS 83%

XWiki Platform is a generic wiki platform. Starting in version 7.2-rc-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, by creating a document…

Fix: 14.10.20 / 15.5.4+
Fix from $1,950 2024-04-10
Xwiki HIGH 8.8
CVE-2024-31465EPSS 76%

XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.20, 15.5.4, and 15.9-rc-1, any user with edit rig…

Fix: 14.10.20 / 15.5.4+
Fix from $1,950 2024-04-10
Application Licensing MEDIUM 5.3
CVE-2024-26138

The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.LicenseJSON`…

Fix: 1.24.2+
Fix from $1,600 2024-02-21
Xwiki HIGH 8.8
CVE-2024-21648

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right prote…

Fix: 14.10.17 / 15.5.3+
Fix from $1,950 2024-01-09
Xwiki MEDIUM 6.5
CVE-2024-21651

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can p…

Fix: 14.10.18 / 15.5.3+
Fix from $1,600 2024-01-09
Xwiki CRITICAL 9.8
CVE-2024-21650EPSS 93%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code executi…

Fix: 14.10.17 / 15.5.3+
Fix from $2,300 2024-01-08
Xwiki MEDIUM 6.3
CVE-2023-50732

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute a Velocity script w…

Fix: 14.10.7 / 15.2+
Fix from $1,600 2023-12-21
Xwiki HIGH 8.8
CVE-2023-50723

XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, anyone who can edit an arbitrary wi…

Fix: 14.10.5 / 15.5.2+
Fix from $1,950 2023-12-15
Xwiki HIGH 8.8
CVE-2023-50721EPSS 79%

XWiki Platform is a generic wiki platform. Starting in 4.5-rc-1 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the search administration inte…

Fix: 14.10.5 / 15.5.2+
Fix from $1,950 2023-12-15
Xwiki HIGH 8.8
CVE-2023-50722

XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, there is a reflected XSS or also di…

Fix: 14.10.5 / 15.5.2+
Fix from $1,950 2023-12-15