org.xwiki.rendering:xwiki-rendering-macro-html (13.10.3), org.xwiki.rendering:xwiki-rendering-standalone (13.10.3) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.3)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.4), org.xwiki.rendering:xwiki-rendering-standalone (13.10.4) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.4)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.5), org.xwiki.rendering:xwiki-rendering-standalone (13.10.5) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.5)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.6), org.xwiki.rendering:xwiki-rendering-standalone (13.10.6) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.6)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.7), org.xwiki.rendering:xwiki-rendering-standalone (13.10.7) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.7)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.8), org.xwiki.rendering:xwiki-rendering-standalone (13.10.8) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.8)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.9), org.xwiki.rendering:xwiki-rendering-standalone (13.10.9) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.9)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.10), org.xwiki.rendering:xwiki-rendering-standalone (13.10.10) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.10)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.10.11), org.xwiki.rendering:xwiki-rendering-standalone (13.10.11) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (13.10.11)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version 13.10.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-macro-html (>=14.0-rc-1, <=14.5), org.xwiki.rendering:xwiki-rendering-standalone (>=14.0-rc-1, <=14.5) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (>=14.0-rc-1, <=14.5)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.5 Source cves: CVE-2023-32070, CVE-2023-37908 Source advisory: OSV:GHSA-6GF5-C898-7RXP...

org.xwiki.rendering:xwiki-rendering-macro-html (>=14.0-rc-1, <=14.5), org.xwiki.rendering:xwiki-rendering-standalone (>=14.0-rc-1, <=14.5) +1 more potentially affected by CVE-2023-32070 via org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml (>=14.0-rc-1, <=14.5)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedxhtml MAVEN version =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.5 Source cves: CVE-2023-32070 Source advisory: GHSA-6GF5-C898-7RXP...

org.xwiki.rendering:xwiki-rendering-macro-html (12.1), org.xwiki.rendering:xwiki-rendering-standalone (12.1) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (12.1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.3), org.xwiki.rendering:xwiki-rendering-standalone (12.3) potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 (12.3)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 MAVEN version 12.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html...

org.xwiki.rendering:xwiki-rendering-macro-html (12.10.3), org.xwiki.rendering:xwiki-rendering-standalone (12.10.3) potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 (12.10.3)

org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 MAVEN version 12.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 and may be impacted: -...

org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 (6.4.1) potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-html5 (6.4.1)

org.xwiki.rendering:xwiki-rendering-syntax-html5 MAVEN version 6.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-html5 and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 6.4.1...

org.xwiki.rendering:xwiki-rendering-macro-html (10.7.1), org.xwiki.rendering:xwiki-rendering-standalone (10.7.1) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (10.7.1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 10.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.7.1 -...

org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 (10.4) potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-html5 (10.4)

org.xwiki.rendering:xwiki-rendering-syntax-html5 MAVEN version 10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-html5 and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-annotatedhtml5 10.4...

org.xwiki.rendering:xwiki-rendering-macro-html (3.4-rc-1) potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (3.4-rc-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 3.4-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 3.4-rc-1 Sour...

PT-2023-26177 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions 14.6-rc-1 through 14.10.3 XWiki versions prior to 15.0 RC1 Description: The issue concerns the cleaning of attributes during XHTML rendering in XWiki, which allowed the injection of arbitrary HTML code and thus cross-site...

org.xwiki.rendering:xwiki-rendering-macro-html (>=11.4-rc-1, <=14.5), org.xwiki.rendering:xwiki-rendering-standalone (>=11.4-rc-1, <=14.5) +1 more potentially affected by CVE-2023-32070 via org.xwiki.rendering:xwiki-rendering-syntax-html5 (>=6.4-milestone-3, <=14.5)

org.xwiki.rendering:xwiki-rendering-syntax-html5 MAVEN version =6.4-milestone-3, =11.4-rc-1, =11.4-rc-1, =6.4-milestone-3, =14.5 Source cves: CVE-2023-32070 Source advisory: MEND:CVE-2023-32070...