cov-int

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

xwiki__xwiki-commons_CVE-2022-24897_12-6-6

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

xwiki__xwiki-commons_CVE-2023-31126_14-10-3

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

xwiki__xwiki-commons_CVE-2023-36471_14-10-5

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

xwiki__xwiki-commons_CVE-2023-29201_14-5

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

XWiki - Open Redirect Detection

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put in place to avoid open redirect by using a redirect such as //mydomain.com i.e. omitting the http:. It was also possible to bypass it when using URL...

org.xwiki.commons:xwiki-commons-cache-api (>=18.0.0-rc-1, <=18.2.0-rc-1), org.xwiki.commons:xwiki-commons-cache-infinispan (>=18.0.0-rc-1, <=18.2.0-rc-1) +71 more potentially affected by CVE-2026-34151 via org.xwiki.commons:xwiki-commons-environment-api (>=18.0.0-rc-1, <=18.2.0-rc-1)

org.xwiki.commons:xwiki-commons-environment-api MAVEN version =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.2.0-rc-1 -...

org.xwiki.commons:xwiki-commons-netflux (>=17.0.0-rc-1, <=17.10.4), org.xwiki.commons:xwiki-commons-websocket (>=17.0.0-rc-1, <=17.10.4) potentially affected by CVE-2026-34151 via org.xwiki.commons:xwiki-commons-environment-servlet (>=17.0.0-rc-1, <=17.10.4)

org.xwiki.commons:xwiki-commons-environment-servlet MAVEN version =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.10.4 Source cves: CVE-2026-34151 Source advisory: SNYK:JAVA-ORGXWIKICOMMONS-17879389...

org.xwiki.commons:xwiki-commons-cache-api (>=17.0.0-rc-1, <=17.10.4), org.xwiki.commons:xwiki-commons-cache-infinispan (>=17.0.0-rc-1, <=17.10.4) +70 more potentially affected by CVE-2026-34151 via org.xwiki.commons:xwiki-commons-environment-api (>=17.0.0-rc-1, <=17.10.4)

org.xwiki.commons:xwiki-commons-environment-api MAVEN version =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.10.4...

org.xwiki.commons:xwiki-commons-netflux (>=18.0.0-rc-1, <=18.2.0-rc-1), org.xwiki.commons:xwiki-commons-websocket (>=18.0.0-rc-1, <=18.2.0-rc-1) potentially affected by CVE-2026-34151 via org.xwiki.commons:xwiki-commons-environment-servlet (>=18.0.0-rc-1, <=18.2.0-rc-1)

org.xwiki.commons:xwiki-commons-environment-servlet MAVEN version =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.2.0-rc-1 Source cves: CVE-2026-34151 Source advisory: SNYK:JAVA-ORGXWIKICOMMONS-17879389...

Path Traversal

org.xwiki.commons, xwiki-commons-classloader-api is vulnerable to Path Traversal. The vulnerability is due to improper validation of the resource parameter in the ssx and jsx endpoints, which allows an attacker to exploit leading slashes and directory traversal sequences to read arbitrary...

org.xwiki.commons:xwiki-commons-extension-api (>=18.0.0-rc-1, <=18.0.1), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=18.0.0-rc-1, <=18.0.1) +10 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=18.0.0-rc-1, <=18.0.1)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.1 Source cves: CVE-2026-23734 Source advisory:...

org.xwiki.commons:xwiki-commons-extension-api (>=17.0.0-rc-1, <=17.4.8), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=17.0.0-rc-1, <=17.4.8) +9 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=17.0.0-rc-1, <=17.4.8)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.4.8 Source cves: CVE-2026-23734 Source advisory:...

org.xwiki.commons:xwiki-commons-extension-api (>=17.5.0, <=17.10.2), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=17.5.0, <=17.10.2) +10 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=17.5.0, <=17.10.2)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.10.0-rc-1, =17.5.0, =17.10.2 Source cves: CVE-2026-23734 Source advisory: OSV:GHSA-XQ3R-2QV5-VQQM...

org.xwiki.commons:xwiki-commons-classloader-protocol-jar (>=4.2-milestone-2, <=12.4), org.xwiki.commons:xwiki-commons-extension-api (>=11.10.11, <=16.10.16) +58 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=4.2-milestone-2, <=16.10.16)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =4.2-milestone-2, =4.2-milestone-2, =11.10.11, =4.2-milestone-2, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.13 and more Source cves: CVE-2026-23734https://vulner...

org.xwiki.commons:xwiki-commons-extension-api (>=18.0.0-rc-1, <=18.0.1), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=18.0.0-rc-1, <=18.0.1) +10 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=18.0.0-rc-1, <=18.0.1)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.0-rc-1, =18.0.1 Source cves: CVE-2026-23734 Source advisory:...

org.xwiki.commons:xwiki-commons-extension-api (>=17.5.0, <=17.10.2), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=17.5.0, <=17.10.2) +10 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=17.5.0, <=17.10.2)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.5.0, =17.10.0-rc-1, =17.5.0, =17.10.2 Source cves: CVE-2026-23734 Source advisory: GHSA-XQ3R-2QV5-VQQM...

org.xwiki.commons:xwiki-commons-extension-api (>=17.0.0-rc-1, <=17.4.8), org.xwiki.commons:xwiki-commons-extension-handler-jar (>=17.0.0-rc-1, <=17.4.8) +9 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=17.0.0-rc-1, <=17.4.8)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.4.8 Source cves: CVE-2026-23734 Source advisory:...

org.xwiki.commons:xwiki-commons-classloader-protocol-jar (>=4.2-milestone-2, <=12.4), org.xwiki.commons:xwiki-commons-extension-api (>=11.10.11, <=16.10.16) +58 more potentially affected by CVE-2026-23734 via org.xwiki.commons:xwiki-commons-classloader-api (>=4.2-milestone-2, <=16.10.16)

org.xwiki.commons:xwiki-commons-classloader-api MAVEN version =4.2-milestone-2, =4.2-milestone-2, =11.10.11, =4.2-milestone-2, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.11, =11.10.13 and more Source cves: CVE-2026-23734https://vulner...