org.xwiki.platform:xwiki-platform-rest-server vulnerabilities (Maven)
11 vulnerabilities.
org.xwiki.platform:xwiki-platform-rest-serverMavenXWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}9.3 Criticalorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki's REST APIs don't enforce any limits, leading to unavailability and OOM in large wikis8.7 Highorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki Platform vulnerable to HQL injection via wiki and space search REST API9.3 Criticalorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki makes title of inaccessible pages available through the class property values REST API8.7 Highorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki missing authorization when accessing the wiki level attachments list and metadata via REST API5.3 Mediumorg.xwiki.platform:xwiki-platform-rest-serverMavenorg.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API9.3 Criticalorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki allows unregistered users to access private pages information through REST endpoint8.7 Highorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki Platform document history including authors of any page exposed to unauthorized actors5.3 Mediumorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API9.7 Criticalorg.xwiki.platform:xwiki-platform-rest-serverMavenXWiki Platform may show email addresses in clear in REST results7.5 Highorg.xwiki.platform:xwiki-platform-rest-serverMavenExposure of Private Personal Information to an Unauthorized Actor in xwiki-platform-rest-server5.3 Medium