Skip to contentHallo Welt! Gmbh Bluespice vulnerabilities
- hallo welt! gmbh bluespicebluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysopCVE-2026-257849.3 Critical
- hallo welt! gmbh bluespiceBlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking usersCVE-2026-257167.1 High
- hallo welt! gmbh bluespiceImproper permission checks in Extension:NSFileRepoCVE-2026-247326.6 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:CognitiveProcessDesignerCVE-2025-581145.9 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:BlueSpiceWhoIsOnlineCVE-2025-578805.9 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:BlueSpiceAvatarsCVE-2025-480075.9 Medium
- hallo welt! gmbh bluespicePotential XSS in Extension:AtMentionsCVE-2025-467035.9 Medium
- hallo welt! gmbh bluespicePotential XSS on user preferences pageCVE-2023-424312.1 Low
- hallo welt! gmbh bluespicePotential XSS in book navigationCVE-2022-420013.3 Low
- hallo welt! gmbh bluespicePotential XSS in comment sectionCVE-2022-420003.3 Low
- hallo welt! gmbh bluespicePotential XSS in history viewCVE-2022-418143.3 Low
- hallo welt! gmbh bluespicePotential XSS on default page headerCVE-2022-417893.3 Low
- hallo welt! gmbh bluespicePotential XSS on sidebar navigationCVE-2022-416112.3 Low
- hallo welt! gmbh bluespicePotential XSS on personal menu navigationCVE-2022-39583.3 Low
- hallo welt! gmbh bluespicePotential XSS on custom menu navigationCVE-2022-38932.3 Low
- hallo welt! gmbh bluespicePotential XSS on Special:SearchCenterCVE-2022-25104.3 Medium
- hallo welt! gmbh bluespicePotential XSS in title URL parameterCVE-2022-25114.3 Medium