6741 matches found
org.xwiki.commons:xwiki-commons-diff-script (>=13.5-rc-1, <=13.7), org.xwiki.commons:xwiki-commons-diff-xml (>=13.5-rc-1, <=13.7) +21 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=13.5-rc-1, <=13.7)
org.xwiki.commons:xwiki-commons-xml MAVEN version =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.7 and more Source cves: CVE-2022-24898 Source...
org.xwiki.commons:xwiki-commons-diff-script (>=13.0, <=13.4.3), org.xwiki.commons:xwiki-commons-diff-xml (>=13.0, <=13.4.3) +21 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=13.0, <=13.4.3)
org.xwiki.commons:xwiki-commons-xml MAVEN version =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.4.3 and more Source cves: CVE-2022-24898 Source advisory: MEND:CVE-2022-24898...
org.wikbook:wikbook.maven (>=0.9.33, <=0.9.45), org.wikbook:wikbook.xwiki (>=0.9.33, <=0.9.45) +57 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=3.2-milestone-3, <=12.10.9)
org.xwiki.commons:xwiki-commons-xml MAVEN version =3.2-milestone-3, =0.9.33, =0.9.33, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =3.2-milestone-3, =3.2-milestone-3, =4.1-milestone-1, =3.2-milestone-3, =3.2-milestone-3, =4.2-milestone-3, =4.1-milestone-2,...
CVE-2022-24898 Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki application server with XML External...
org.wikbook:wikbook.maven (>=0.9.33, <=0.9.45), org.wikbook:wikbook.xwiki (>=0.9.33, <=0.9.45) +57 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=3.2-milestone-3, <=12.10.9)
org.xwiki.commons:xwiki-commons-xml MAVEN version =3.2-milestone-3, =0.9.33, =0.9.33, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =3.2-milestone-3, =3.2-milestone-3, =4.1-milestone-1, =3.2-milestone-3, =3.2-milestone-3, =4.2-milestone-3, =4.1-milestone-2,...
org.xwiki.commons:xwiki-commons-diff-script (>=13.5-rc-1, <=13.7), org.xwiki.commons:xwiki-commons-diff-xml (>=13.5-rc-1, <=13.7) +21 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=13.5-rc-1, <=13.7)
org.xwiki.commons:xwiki-commons-xml MAVEN version =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.7 and more Source cves: CVE-2022-24898 Source...
org.xwiki.commons:xwiki-commons-diff-script (>=13.0, <=13.4.3), org.xwiki.commons:xwiki-commons-diff-xml (>=13.0, <=13.4.3) +21 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=13.0, <=13.4.3)
org.xwiki.commons:xwiki-commons-xml MAVEN version =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.4.3 and more Source cves: CVE-2022-24898 Source advisory: GHSA-M2R5-4W96-QXG5...
org.wikbook:wikbook.maven (>=0.9.33, <=0.9.45), org.wikbook:wikbook.xwiki (>=0.9.33, <=0.9.45) +57 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=3.2-milestone-3, <=12.10.9)
org.xwiki.commons:xwiki-commons-xml MAVEN version =3.2-milestone-3, =0.9.33, =0.9.33, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =3.2-milestone-3, =3.2-milestone-3, =4.1-milestone-1, =3.2-milestone-3, =3.2-milestone-3, =4.2-milestone-3, =4.1-milestone-2,...
org.xwiki.commons:xwiki-commons-diff-script (>=13.5-rc-1, <=13.7), org.xwiki.commons:xwiki-commons-diff-xml (>=13.5-rc-1, <=13.7) +21 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=13.5-rc-1, <=13.7)
org.xwiki.commons:xwiki-commons-xml MAVEN version =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.5-rc-1, =13.7 and more Source cves: CVE-2022-24898 Source...
org.xwiki.commons:xwiki-commons-diff-script (>=13.0, <=13.4.3), org.xwiki.commons:xwiki-commons-diff-xml (>=13.0, <=13.4.3) +21 more potentially affected by CVE-2022-24898 via org.xwiki.commons:xwiki-commons-xml (>=13.0, <=13.4.3)
org.xwiki.commons:xwiki-commons-xml MAVEN version =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.0, =13.4.3 and more Source cves: CVE-2022-24898 Source advisory: OSV:GHSA-M2R5-4W96-QXG5...
apache-commons-jxpath:JXPathFuzzer: Uncaught exception in org.apache.commons.jxpath.ri.parser.XPathParser.UnaryExpr
Detailed Report: https://oss-fuzz.com/testcase?key=6070430919688192 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...
apache-commons-jxpath:JXPathFuzzer: Timeout in JXPathFuzzer
Detailed Report: https://oss-fuzz.com/testcase?key=4800178437095424 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: JXPathFuzzer...
PT-2022-16967
Name of the Vulnerable Software and Affected Versions xwiki-commons-xml versions 2.7 through 12.10.9 xwiki-commons-xml versions 13.0.0 through 13.4.3 xwiki-commons-xml versions 13.8-rc-0 and earlier Description The issue allows a script to access any file accessible to the user running the XWiki...
CVE-2022-24898: Improper Restriction of XML External Entity Reference
org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki application server with XML External...
XWiki Commons code-related vulnerabilities
XWiki Commons is a technology library shared by several other top XWiki projects. A security vulnerability exists in XWiki Commons, which stems from a script that can access any file service accessed by a user running an XWiki application server via XML script injection via XML external entities...
Security Bulletin: Multiple vulnerabilities in WebSphere Application Server Liberty affect IBM InfoSphere Information Server
Summary Muiltiple vulnerabilities in WebSphere Application Server Liberty that is used by IBM InfoSphere Information Server are addressed. Vulnerability Details CVEID: CVE-2021-29842 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow...
apache-commons-jxpath:JXPathFuzzer: Uncaught exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.compute
Detailed Report: https://oss-fuzz.com/testcase?key=6148152412995584 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...
apache-commons-jxpath:JXPathFuzzer: Uncaught exception in org.apache.commons.jxpath.ri.EvalContext.getDocumentOrder
Detailed Report: https://oss-fuzz.com/testcase?key=5407201633632256 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...
apache-commons-jxpath:JXPathFuzzer: Uncaught exception in org.apache.commons.jxpath.ri.axes.SimplePathInterpreter.createNullPointerForPred
Detailed Report: https://oss-fuzz.com/testcase?key=4800550421528576 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...
Cross-site Scripting (XSS)
acs-aem-commons is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script via the a and b GET parameters in page compare when a victim with access to AEM Author visits the page...