Browse CVEs

HIGH 7.5 CVE-2024-52298 macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Deleg… Pdf Viewer Macro 2.5.6+ Fix from $1,9502024-11-13 HIGH 7.5 CVE-2024-52299 macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment st… Pdf Viewer Macro 2.5.6+ Fix from $1,9502024-11-13 MEDIUM 5.3 CVE-2024-46979 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification … Xwiki 14.10.21 / 15.5.5+ Fix from $1,6002024-09-18 MEDIUM 6.5 CVE-2024-46978 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of… Xwiki 14.10.21 / 15.5.5+ Fix from $1,6002024-09-18 MEDIUM 5.3 CVE-2024-45591 XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed in… Xwiki 15.10.9 / 16.3.0+ Fix from $1,6002024-09-10 HIGH 8.0 CVE-2024-43401 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can … Xwiki after 15.9 Fix from $1,9502024-08-19 MEDIUM 5.4 CVE-2024-43400 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible for a user without Script or … Xwiki 14.10.21 / 15.5.5+ Fix from $1,6002024-08-19 HIGH 8.8 CVE-2024-42489 Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` pag… Pro Macros 1.10.1+ Fix from $1,9502024-08-12 MEDIUM 5.4 CVE-2024-41947 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a conflict when another user wit… Xwiki 15.10.8 / 16.3.0+ Fix from $1,6002024-07-31 HIGH 8.8 CVE-2024-37901 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit right on any page can per… Xwiki 14.10.21 / 15.5.5+ Fix from $1,9502024-07-31 HIGH 8.0 CVE-2024-37899 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin disables a user account, the u… Xwiki 14.10.21 / 15.5.5+ Fix from $1,9502024-06-20 HIGH 8.8 CVE-2024-31997EPSS 74% XWiki Platform is a generic wiki platform. Prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, parameters of UI extensions are always interpreted as V… Xwiki 14.10.19 / 15.5.4+ Fix from $1,9502024-04-10 CRITICAL 9.8 CVE-2024-31996 XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, the HTML escaping of esca… Xwiki 14.10.19 / 15.5.4+ Fix from $2,3002024-04-10 HIGH 8.8 CVE-2024-31987 XWiki Platform is a generic wiki platform. Starting in version 6.4-milestone-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, any user who ca… Xwiki 14.10.19 / 15.5.4+ Fix from $1,9502024-04-10 HIGH 8.8 CVE-2024-31988 XWiki Platform is a generic wiki platform. Starting in version 13.9-rc-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, when the realtime edi… Xwiki 14.10.19 / 15.5.4+ Fix from $1,9502024-04-10 HIGH 8.8 CVE-2024-31986 XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, by creating a document with… Xwiki 14.10.19 / 15.5.4+ Fix from $1,9502024-04-10 MEDIUM 5.4 CVE-2024-31985 XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, it is possible to schedule/… Xwiki 14.10.19 / 15.5.4+ Fix from $1,6002024-04-10 CRITICAL 9.8 CVE-2024-31982EPSS 34% XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's databas… Xwiki 14.10.20 / 15.5.4+ Fix from $2,3002024-04-10 HIGH 8.8 CVE-2024-31981 XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, remote code execution is … Xwiki 14.10.19 / 15.5.4+ Fix from $1,9502024-04-10 HIGH 8.8 CVE-2024-31983 XWiki Platform is a generic wiki platform. In multilingual wikis, translations can be edited by any user who has edit right, circumventing the rights… Xwiki 14.10.20 / 15.5.4+ Fix from $1,9502024-04-10 HIGH 8.8 CVE-2024-31984EPSS 83% XWiki Platform is a generic wiki platform. Starting in version 7.2-rc-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, by creating a document… Xwiki 14.10.20 / 15.5.4+ Fix from $1,9502024-04-10 HIGH 8.8 CVE-2024-31465EPSS 76% XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.20, 15.5.4, and 15.9-rc-1, any user with edit rig… Xwiki 14.10.20 / 15.5.4+ Fix from $1,9502024-04-10 MEDIUM 5.3 CVE-2024-26138 The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.LicenseJSON`… Application Licensing 1.24.2+ Fix from $1,6002024-02-21 HIGH 8.8 CVE-2024-21648 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right prote… Xwiki 14.10.17 / 15.5.3+ Fix from $1,9502024-01-09 MEDIUM 6.5 CVE-2024-21651 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can p… Xwiki 14.10.18 / 15.5.3+ Fix from $1,6002024-01-09 CRITICAL 9.8 CVE-2024-21650EPSS 93% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code executi… Xwiki 14.10.17 / 15.5.3+ Fix from $2,3002024-01-08 MEDIUM 6.3 CVE-2023-50732 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute a Velocity script w… Xwiki 14.10.7 / 15.2+ Fix from $1,6002023-12-21 HIGH 8.8 CVE-2023-50723 XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, anyone who can edit an arbitrary wi… Xwiki 14.10.5 / 15.5.2+ Fix from $1,9502023-12-15 HIGH 8.8 CVE-2023-50721EPSS 79% XWiki Platform is a generic wiki platform. Starting in 4.5-rc-1 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the search administration inte… Xwiki 14.10.5 / 15.5.2+ Fix from $1,9502023-12-15 HIGH 8.8 CVE-2023-50722 XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, there is a reflected XSS or also di… Xwiki 14.10.5 / 15.5.2+ Fix from $1,9502023-12-15