CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837

XWiki Rendering (org.xwiki.rendering:xwiki-rendering-xml) is affected by an Eval Injection flaw prior to versions 14.10.2 and 15.0 RC1 . Rendering output is included as content of HTML macros without further escaping, allowing an attacker who can edit a document (e.g., their own profile) to close...

EUVD-2025-210935

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

GHSA-26VP-8GXG-V4PG org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

org.xwiki.rendering:xwiki-rendering-macro-html (6.1-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (6.1-milestone-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.1-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.1-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.1-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.8-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (10.8-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.8-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.8-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.8-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.8.1), org.xwiki.rendering:xwiki-rendering-standalone (10.8.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.8.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.8.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.3), org.xwiki.rendering:xwiki-rendering-standalone (10.11.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.11.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.6), org.xwiki.rendering:xwiki-rendering-standalone (10.11.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.11.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.11.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.6 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.11), org.xwiki.rendering:xwiki-rendering-standalone (10.11.11) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.11.11)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.11 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.0), org.xwiki.rendering:xwiki-rendering-standalone (11.0) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.0)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.0 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3), org.xwiki.rendering:xwiki-rendering-standalone (11.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.10.13), org.xwiki.rendering:xwiki-rendering-standalone (11.10.13) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.10.13)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.10.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.10.13 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.2), org.xwiki.rendering:xwiki-rendering-standalone (5.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.2.3), org.xwiki.rendering:xwiki-rendering-standalone (5.2.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.2.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.3-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (5.3-milestone-2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.3-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.3-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.3-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.2-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (8.2-milestone-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (8.2-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.2-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.2-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.4.5), org.xwiki.rendering:xwiki-rendering-standalone (8.4.5) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (8.4.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.4.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.3.1), org.xwiki.rendering:xwiki-rendering-standalone (9.3.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.3.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.3.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.7-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (9.7-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.7-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.7-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.7-rc-1 -...