Browse CVEs

HIGH 8.8 CVE-2023-37462EPSS 91% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `SkinsCode… Xwiki 14.4.8 / 14.10.4+ Fix from $1,9502023-07-14 CRITICAL 9.6 CVE-2023-37277 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API allows executing all actions vi… Xwiki 14.10.8 / 15.2+ Fix from $2,3002023-07-10 MEDIUM 5.4 CVE-2023-36477 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights can edit all pages… Ckeditor Integration 1.64.9 / 14.10.6+ Fix from $1,6002023-06-30 HIGH 8.8 CVE-2023-36468 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki installation is upgraded and t… Xwiki 14.10.7+ Fix from $1,9502023-06-29 HIGH 8.8 CVE-2023-36469EPSS 82% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile… Xwiki 14.10.6+ Fix from $1,9502023-06-29 HIGH 8.8 CVE-2023-36470 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an exist… Xwiki 14.10.6+ Fix from $1,9502023-06-29 MEDIUM 5.4 CVE-2023-36471 Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowe… Commons 14.10.6+ Fix from $1,6002023-06-29 MEDIUM 6.1 CVE-2023-35155 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa… Xwiki 14.4.8 / 14.10.4+ Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-35156 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa… Xwiki 14.10.6+ Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-35158 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa… Xwiki 14.10.5+ Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-35159 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa… Xwiki 14.10.5+ Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-35160 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa… Xwiki 14.10.5+ Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-35161 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa… Xwiki 14.10.5+ Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-35162 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa… Xwiki 14.10.5+ Fix from $1,6002023-06-23 MEDIUM 5.4 CVE-2023-35153 XWiki Platform is a generic wiki platform. Starting in version 5.4.4 and prior to versions 14.4.8, 14.10.4, and 15.0, a stored cross-site scripting v… Xwiki 14.4.8 / 14.10.4+ Fix from $1,6002023-06-23 HIGH 8.8 CVE-2023-35152 XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in user can add … Xwiki 14.4.8 / 14.10.6+ Fix from $1,9502023-06-23 HIGH 8.0 CVE-2023-35150EPSS 78% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to ver… Xwiki 14.4.8 / 14.10.4+ Fix from $1,9502023-06-23 HIGH 7.5 CVE-2023-34467 XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfusca… Xwiki 14.4.8 / 14.10.4+ Fix from $1,9502023-06-23 HIGH 7.5 CVE-2023-35151 XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a RE… Xwiki 14.4.8 / 14.10.6+ Fix from $1,9502023-06-23 HIGH 8.1 CVE-2023-34465 XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, `Mail.MailConfig` can be ed… Xwiki 14.4.8 / 14.10.6+ Fix from $1,9502023-06-23 MEDIUM 5.4 CVE-2023-34464 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.2.1 until versions 14.… Xwiki 14.4.8 / 14.10.5+ Fix from $1,6002023-06-23 HIGH 8.8 CVE-2023-35166EPSS 63% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content wi… Xwiki 14.10.5+ Fix from $1,9502023-06-20 MEDIUM 6.1 CVE-2023-32068EPSS 55% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible t… Xwiki 14.10.4+ Fix from $1,6002023-05-15 MEDIUM 6.1 CVE-2023-32070 XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This al… Rendering after 14.5 Fix from $1,6002023-05-10 CRITICAL 9.0 CVE-2023-32071EPSS 70% XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible t… Xwiki 14.4.8 / 14.10.4+ Fix from $2,3002023-05-09 HIGH 8.8 CVE-2023-32069 XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user … Xwiki 14.10.4+ Fix from $1,9502023-05-09 CRITICAL 9.6 CVE-2023-31126 `org.xwiki.commons:xwiki-commons-xml` is an XML library used by the open-source wiki platform XWiki. The HTML sanitizer, introduced in version 14.6-r… Xwiki 14.10.4+ Fix from $2,3002023-05-09 CRITICAL 9.0 CVE-2023-29528 XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduce… Commons 14.10+ Fix from $2,3002023-04-20 HIGH 8.8 CVE-2023-29524EPSS 76% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything with the r… Xwiki 14.10.3+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29525EPSS 78% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to co… Xwiki 14.4.8 / 14.10.3+ Fix from $1,9502023-04-19