Skip to contentXwiki vulnerabilities
Newest
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete templateCVE-2023-35156Fix available9.7 Critical
- xwiki, xwiki xwiki-platform +1 morePrivilege escalation (PR) from account through TipsPanelCVE-2023-35166Fix availableEPSS 63.1%10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreXPlatform Wiki vulnerable to cross-site scripting via xcontinue parameter in preview actions templateCVE-2023-35162Fix available9.7 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to cross-site scripting in target parameter via share page by emailCVE-2023-35155Fix available8.8 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parametersCVE-2023-35153Fix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResultsCVE-2023-35152Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform may show email addresses in clear in REST resultsCVE-2023-35151Fix available7.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation applicationCVE-2023-35150Fix availableEPSS 77.7%9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform may retrieve email addresses of all usersCVE-2023-34467Fix available7.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform's tags on non-viewable pages can be revealed to usersCVE-2023-34466Fix available4.3 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform's Mail.MailConfig can be edited by any user with edit rightsCVE-2023-34465Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent templateCVE-2023-34464Fix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreURL Redirection to Untrusted Site in XWikiCVE-2023-32068Fix availableEPSS 55.6%4.7 Medium
- xwiki rendering, xwiki, xwiki xwiki-rendering +2 moreImproper Neutralization of Script in Attributes in XWiki (X)HTML renderersCVE-2023-32070Public exploitFix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to RXSS via editor parameter - importinline templateCVE-2023-32071Fix availableEPSS 70.4%9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform privilege escalation (PR)/RCE from account through class sheetCVE-2023-32069Fix available10.0 Critical
- xwiki, xwiki xwiki-commons +1 moreImproper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xmlCVE-2023-31126Public exploitFix available9.1 Critical
- xwiki commons, xwiki-commons +1 moreCross-site Scripting in org.xwiki.commons:xwiki-commons-xmlCVE-2023-29528Public exploitFix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreExposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewerCVE-2023-29517Fix available7.5 High
- xwiki, xwiki xwiki-platform +1 moreCode injection from view right on XWiki.AttachmentSelector in xwiki-platformCVE-2023-29516Fix availableEPSS 65.9%9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreCross-site scripting (XSS) in xwiki-platformCVE-2023-29515Fix available7.7 High
- xwiki, xwiki xwiki-platform +1 moreCode injection in template provider administration in xwiki-platformCVE-2023-29514Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreUsers can be created even when registration is disabled without validation via the template macro in xwiki-platformCVE-2023-29513Fix available5.0 Medium
- xwiki, xwiki xwiki-platform +1 moreCode injection in xwiki-platform-web-templatesCVE-2023-29512Fix available9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection via unescaped translations in xwiki-platformCVE-2023-29510Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection from view right on XWiki.ClassSheet in xwiki-platformCVE-2023-29522Fix available9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection from account/view through VFS Tree macro in xwiki-platformCVE-2023-29521Fix available8.4 High
- xwiki, xwiki xwiki-platform +1 morePage render failure due to broken translations in xwiki-platformCVE-2023-29520Fix available4.3 Medium
- xwiki, xwiki xwiki-platform +1 moreCode injection in org.xwiki.platform:xwiki-platform-attachment-uiCVE-2023-29519Fix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection from view right using Invitation.InvitationCommon in xwiki-platformCVE-2023-29518Fix available9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection in display method used in user profiles in xwiki-platformCVE-2023-29523Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection from account through XWiki.SchedulerJobSheet in xwiki-platformCVE-2023-29524Fix availableEPSS 75.7%10.0 Critical
- xwiki, xwiki xwiki-platform +1 morePrivilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platformCVE-2023-29525Fix availableEPSS 77.8%10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreAsync and display macro allow displaying and interacting with any document in restricted modeCVE-2023-29526Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreCode injection from account through AWM view sheet in xwiki platformCVE-2023-29527Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreImproper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable MacroCVE-2023-29207Fix available8.9 High
- xwiki, xwiki xwiki-platform +1 moreUnauthenticated user can have information about hidden users on subwikis through uorgsuggest.vmCVE-2023-29203Fix available3.7 Low
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX pluginsCVE-2023-29206Fix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macroCVE-2023-29205Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreURL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcoreCVE-2023-29204Fix available4.7 Medium
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerabilityCVE-2023-29202Fix available9.1 Critical
- xwiki, xwiki xwiki-commons +1 moreorg.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerabilityCVE-2023-29201Public exploitFix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 morexwiki-platform-administration-ui vulnerable to privilege escalationCVE-2023-29511Fix available9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalationCVE-2023-30537Fix available9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerabilityCVE-2023-29509Fix availableEPSS 76.2%10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Cross-site ScriptingCVE-2023-29508Fix available8.9 High
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthorsCVE-2023-29507Fix available9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticated endpointsCVE-2023-29506Fix available5.4 Medium
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerabilityCVE-2023-29214Fix available10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-logging-ui Injection vulnerabilityCVE-2023-29213Fix available9.1 Critical
- Show moreLoading…