Filter
AND
Xwiki XwikiXWiki Platform's tags on non-viewable pages can be revealed to users
4.3
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader
6.4
First published (updated )
Xwiki XwikiVelocity execution without script rights in Xwiki platform
6.3
First published (updated )
maven/org.xwiki.platform:xwiki-platform-rest-serverXWiki Platform document history including authors of any page exposed to unauthorized actors
5.3
First published (updated )
Xwiki Xwikiorg.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiThe search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote atta…
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to document deletion and overwrite from edit
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki CryptpadThe pad management logic in XWiki labs CryptPad before 3.0.0 allows a remote attacker (who has acces…
6.5
First published (updated )
Xwiki XwikiUsers with SCRIPT rights can execute arbitrary code in XWiki
6.6
First published (updated )
maven/org.xwiki.platform:xwiki-platform-tool-configuration-resourcesXSS by SVG upload in xwiki-platform
5.4
First published (updated )
Xwiki XwikiThe reset password form reveal users email address
5.3
First published (updated )
Xwiki XwikiNo CSRF protection on the password change form
5.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiA user without PR can reset user authentication failures information
5.5
First published (updated )
Xwiki XwikiExposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui
5.3
First published (updated )
Xwiki XwikiMissing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
4.9
First published (updated )
Xwiki XwikiPlaintext storage of password in org.xwiki.platform:xwiki-platform-security-authentication-default
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiXWiki Cross-Site Request Forgery (CSRF) for actions on tags
4.3
First published (updated )
XWiki CommonsArbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
4.9
First published (updated )
Xwiki XwikiUnauthenticated user can list hidden document from multiple velocity templates
5.3
First published (updated )
Xwiki XwikiUnauthenticated user can retrieve the list of users through uorgsuggest.vm
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiPath traversal in xwiki-platform-skin-skinx
6.8
First published (updated )
Xwiki XwikiPartial authorization bypass on document save in xwiki-platform
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.