Filter
AND
-Infinity
0
Trending
Versions
15.0
8
15.6
7
14.5
6
13.0
5
14.0
5
0.9.793
3
1.0
3
13.1
3
13.1-rc1
3
13.2
3
13.9
3
0.9.1252
2
0.9.543
2
0.9.790
2
0.9.840
2
14.0.0
2
14.4.0
2
14.4.3
2
14.4.4
2
14.6
2
16.0.0
2
5.0
2
6.0
2
1.0-b1
1
1.0-b2
1
1.1-rc1
1
1.1.0
1
1.2
1
1.2-milestone2
1
1.2-rc1
1
1.2-rc2
1
1.2-rc3
1
1.2.1
1
1.3
1
1.3-rc1
1
1.8
1
10.7
1
11.6.1
1
11.7-rc1
1
12.0.0
1
12.10.11
1
12.10.2
1
12.10.5
1
12.10.6
1
12.7
1
13.0.0
1
13.10.4
1
13.10.8
1
13.3
1
13.4
1
XwikiXWiki's scheduler in subwiki allows scheduling operations for any main wiki user
5.4
First published (updated )
maven/org.xwiki.platform:xwiki-platform-messagestreamXWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki
4.7
EPSS
0.06%
First published (updated )
XwikiPartial authorization bypass on document save in xwiki-platform
5.5
First published (updated )
maven/org.xwiki.platform:xwiki-platform-oldcoreOpen Redirect in xwiki-platform
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
XwikiXWiki Cross-Site Request Forgery (CSRF) for actions on tags
4.3
First published (updated )
XwikiPlaintext storage of password in org.xwiki.platform:xwiki-platform-security-authentication-default
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.xwiki.platform:xwiki-platform-tool-configuration-resourcesXSS by SVG upload in xwiki-platform
5.4
First published (updated )
XwikiUnauthenticated user can retrieve the list of users through uorgsuggest.vm
5.3
First published (updated )
XwikiUnauthenticated user can list hidden document from multiple velocity templates
5.3
First published (updated )
XWikiArbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
4.9
First published (updated )
XwikiMissing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
XwikiExposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
5.3
First published (updated )
Xwikiorg.xwiki.platform:xwiki-platform-rendering-parser vulnerable to Improper Handling of Exceptional Conditions
6.5
First published (updated )
XwikiXWiki Platform allows unprivileged users to make arbitrary select queries using DatabaseListProperty and suggest.vm
6.5
First published (updated )
XwikiXWiki Platform allows macro execution as any user without programming rights through the context macro
5.4
First published (updated )
maven/org.xwiki.platform:xwiki-platform-notifications-uiMissing checks for notification filter preferences editions in XWiki Platform
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.xwiki.platform:xwiki-platform-notifications-uiData leak of notification filters of users in XWiki Platform
5.3
First published (updated )
XwikiUnauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm
5.3
First published (updated )
XwikiURL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore
6.1
First published (updated )
Xwikiorg.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticated endpoints
6.1
First published (updated )
maven/org.xwiki.platform:xwiki-platform-web-templatesUsers can be created even when registration is disabled without validation via the template macro in xwiki-platform
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.xwiki.platform:xwiki-platform-localization-source-wikiPage render failure due to broken translations in xwiki-platform
6.5
First published (updated )
maven/org.xwiki.platform:xwiki-platform-scheduler-uiXWiki Platform CSRF in the job scheduler
5.4
EPSS
0.04%
First published (updated )
XwikiXWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader
6.4
First published (updated )
maven/org.xwiki.platform:xwiki-platform-oldcoreXWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted
6.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.