CVE-2025-52472 XWiki Platform vulnerable to HQL injection via wiki and space search REST API

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is...

EUVD-2024-42517

Malicious code in bioql PyPI...

EUVD-2024-26878

Malicious code in bioql PyPI...

EUVD-2023-1280

Malicious code in bioql PyPI...

EUVD-2022-4769

Malicious code in bioql PyPI...

EUVD-2025-21426

Malicious code in bioql PyPI...

EUVD-2022-24967

Malicious code in bioql PyPI...

EUVD-2024-34996

Malicious code in bioql PyPI...

EUVD-2023-58733

Malicious code in bioql PyPI...

EUVD-2022-48219

Malicious code in bioql PyPI...

EUVD-2023-32493

Malicious code in bioql PyPI...

EUVD-2022-4606

Malicious code in bioql PyPI...

EUVD-2022-4098

Malicious code in bioql PyPI...

EUVD-2025-24598

Malicious code in bioql PyPI...

EUVD-2021-32952

Malicious code in bioql PyPI...

EUVD-2022-2053

Malicious code in bioql PyPI...

EUVD-2025-21425

Malicious code in bioql PyPI...

EUVD-2022-7409

Malicious code in bioql PyPI...

EUVD-2021-31660

Malicious code in bioql PyPI...

EUVD-2024-33482

Malicious code in bioql PyPI...