Browse CVEs

HIGH 8.8 CVE-2023-29526 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to displa… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29527 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions a user without script o… Xwiki 14.10.3+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29510 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add translations th… Xwiki 14.10.2+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29512 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., i… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29514 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29516EPSS 66% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on `XWiki.Attachme… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29518 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitr… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29519 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A registered user can perform remote code ex… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29521 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitr… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29522 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitr… Xwiki 14.4.8 / 14.10.3+ Fix from $1,9502023-04-19 HIGH 8.8 CVE-2023-29523 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 HIGH 7.5 CVE-2023-29517 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The office document viewer macro was allowin… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-19 MEDIUM 6.5 CVE-2023-29520 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations com… Xwiki 13.10.11 / 14.4.8+ Fix from $1,6002023-04-19 MEDIUM 5.4 CVE-2023-29515 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can create a space can become a… Xwiki 13.10.11 / 14.4.8+ Fix from $1,6002023-04-19 HIGH 8.8 CVE-2023-29213 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of `org.xwiki.platform:… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-17 HIGH 8.8 CVE-2023-29509EPSS 76% XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents ca… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-16 HIGH 8.8 CVE-2023-29511 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., i… Xwiki 13.10.11 / 14.4.8+ Fix from $1,9502023-04-16 HIGH 8.8 CVE-2023-30537 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with the right to add an object on … Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-16 MEDIUM 5.4 CVE-2023-29508 XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can introduce a stored XSS by us… Xwiki 13.10.11 / 14.4.7+ Fix from $1,6002023-04-16 HIGH 8.8 CVE-2023-29212 XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Pytho… Xwiki 14.4.7+ Fix from $1,9502023-04-16 HIGH 8.8 CVE-2023-29214 XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Pytho… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-16 HIGH 7.2 CVE-2023-29507 XWiki Commons are technical libraries common to several other top level XWiki projects. The Document script API returns directly a DocumentAuthors al… Xwiki 14.4.7+ Fix from $1,9502023-04-16 MEDIUM 6.1 CVE-2023-29506 XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some code using the URL of authenti… Xwiki 13.10.11 / 14.4.7+ Fix from $1,6002023-04-16 HIGH 8.8 CVE-2023-29211 XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights `WikiManager.DeleteWiki` can execut… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-16 HIGH 8.8 CVE-2023-29209 XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents in… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-15 HIGH 8.8 CVE-2023-29210 XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents in… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-15 CRITICAL 9.0 CVE-2023-29207 XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing column names, … Xwiki 13.10.10 / 14.4.6+ Fix from $2,3002023-04-15 HIGH 7.5 CVE-2023-29208 XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for vie… Xwiki 13.10.11 / 14.4.7+ Fix from $1,9502023-04-15 MEDIUM 6.1 CVE-2023-29204 XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put i… Xwiki 13.10.10 / 14.4.4+ Fix from $1,6002023-04-15 MEDIUM 5.4 CVE-2023-29205 XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systematically perform a proper neutr… Xwiki after 14.7 Fix from $1,6002023-04-15