Browse CVEs

HIGH 7.5 CVE-2023-50719EPSS 84% XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search i… Xwiki 14.10.5 / 15.5.2+ Fix from $1,9502023-12-15 MEDIUM 5.3 CVE-2023-50720EPSS 59% XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the email addr… Xwiki 14.10.5 / 15.5.2+ Fix from $1,6002023-12-15 MEDIUM 6.5 CVE-2023-49280 XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the changes. Change request allows to … Change Request 1.10+ Fix from $1,6002023-12-04 HIGH 8.8 CVE-2023-48293 The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerabil… Xwiki 4.5.1+ Fix from $1,9502023-11-20 HIGH 8.8 CVE-2023-48240 XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference f… Xwiki 14.10.15 / 15.5.1+ Fix from $1,9502023-11-20 HIGH 8.8 CVE-2023-48292EPSS 23% The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross sit… Admin Tools 4.5.1+ Fix from $1,9502023-11-20 HIGH 7.5 CVE-2023-48241EPSS 73% XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based se… Xwiki 14.10.5 / 15.5.1+ Fix from $1,9502023-11-20 HIGH 8.8 CVE-2023-46243 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a use… Xwiki 14.10.6 / 15.2+ Fix from $1,9502023-11-07 HIGH 8.8 CVE-2023-46242 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execut… Xwiki 14.10.7 / 15.2+ Fix from $1,9502023-11-07 HIGH 8.8 CVE-2023-46244 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a use… Xwiki 14.10.7 / 15.2+ Fix from $1,9502023-11-07 CRITICAL 9.8 CVE-2023-46731EPSS 89% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section UR… Xwiki 14.10.14 / 15.5.1+ Fix from $2,3002023-11-06 MEDIUM 6.1 CVE-2023-46732 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to reflected cross-site … Xwiki 14.10.14 / 15.5.1+ Fix from $1,6002023-11-06 MEDIUM 5.4 CVE-2023-45137 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` star… Xwiki 13.4 / 14.10.12+ Fix from $1,6002023-10-25 CRITICAL 9.6 CVE-2023-45136EPSS 5% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When document names are validated according … Xwiki 14.10.12 / 15.5+ Fix from $2,3002023-10-25 CRITICAL 9.0 CVE-2023-45134 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` star… Xwiki 13.4 / 14.10.2+ Fix from $2,3002023-10-25 HIGH 8.0 CVE-2023-45135 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.platform:xwiki-platform-web` v… Xwiki 14.10.12 / 15.5+ Fix from $1,9502023-10-25 CRITICAL 9.6 CVE-2023-37908 XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XH… Xwiki Rendering 14.10.4+ Fix from $2,3002023-10-25 HIGH 8.8 CVE-2023-37909 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.1-rc-1 and prior to ve… Xwiki 14.10.8+ Fix from $1,9502023-10-25 HIGH 8.8 CVE-2023-37912 XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior to version 14.10.6 of `org.xwi… Xwiki Rendering 14.10.6+ Fix from $1,9502023-10-25 HIGH 8.8 CVE-2023-37913 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 3.5-milestone-1 and prio… Xwiki 14.10.8 / 15.3+ Fix from $1,9502023-10-25 HIGH 8.1 CVE-2023-37910 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment… Xwiki 14.4.8 / 14.10.4+ Fix from $1,9502023-10-25 MEDIUM 6.5 CVE-2023-37911 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to ve… Xwiki after 14.10.8 Fix from $1,6002023-10-25 CRITICAL 9.6 CVE-2023-45144 com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user … Oauth Identity 1.6+ Fix from $2,3002023-10-16 CRITICAL 9.6 CVE-2023-45138EPSS 71% Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Starting in version 0.11 and pri… Change Request 1.9.2+ Fix from $2,3002023-10-12 MEDIUM 6.3 CVE-2023-41046 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible in XWiki to execute Velocity … Xwiki 14.10.10 / 15.4+ Fix from $1,6002023-09-01 HIGH 8.8 CVE-2023-40573 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain G… Xwiki 14.10.9+ Fix from $1,9502023-08-24 HIGH 8.0 CVE-2023-40572 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF at… Xwiki 14.10.9+ Fix from $1,9502023-08-24 HIGH 8.8 CVE-2023-40177 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can use the content fiel… Xwiki 14.10.5+ Fix from $1,9502023-08-23 MEDIUM 5.4 CVE-2023-40176EPSS 79% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS… Xwiki 14.10.5+ Fix from $1,6002023-08-23 HIGH 8.8 CVE-2023-37914 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can view `Invitation.WebHome` c… Xwiki 14.4.8 / 14.10.6+ Fix from $1,9502023-08-17