The vulnerability of the user registration function of the XWiki Platform allows a perpetrator to execute arbitrary code.

The vulnerability of the user registration function of the XWiki Platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the XWiki platform, a collaborative web application, lies in the insufficient verification of the authenticity of executed requests. This allows attackers to replace the displayed URLs with fake ones.

The vulnerability of the XWiki Platform lies in the insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a malicious actor to substitute the displayed URL with another one...

The vulnerability of the component org.xwiki.platform:xwiki-platform-livetable-ui of the XWiki platform for creating collaborative web applications. The XWiki platform allows attackers to gain unauthorized access to protected information.

The vulnerability of the “org.xwiki.platform:xwiki-platform-livetable-ui” component of the XWiki platform involves the disclosure of information in an unauthorized manner. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the user interface for searching the platform that creates collaborative web applications – XWiki Platform. XWiki allows a perpetrator to execute arbitrary code.

The vulnerability of the user interface for searching the XWiki Platform, a platform for creating collaborative web applications, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vulnerability of configurable administrative sections of the XWiki platform for creating collaborative web applications. The XWiki platform allows a perpetrator to execute arbitrary code.

The vulnerability of the configurable administration sections of the XWiki Platform involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the XWiki platform, which is related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2024-21648

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The problem has been patched in XWiki 14.10.17,...

CVE-2024-21651

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU...

Design/Logic Flaw

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The problem has been patched in XWiki 14.10.17,...

Code injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU...

XWiki Platform Resource Management Error Vulnerability

XWiki Platform is the XWiki Foundation's suite of Wiki platforms for creating web collaboration applications. A resource management error vulnerability exists in XWiki Platform that originates from allowing an attacker to distribute malformed TAR files by manipulating file modification times...

XWiki Platform Security Vulnerability

XWiki Platform is the XWiki Foundation's suite of wiki platforms for creating collaborative web applications. A security vulnerability exists in XWiki Platform that stems from a lack of privilege protection for rollback operations. Affected products and versions: XWiki Platform versions prior to...

CVE-2024-21648 XWiki has no right protection on rollback action

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The problem has been patched in XWiki 14.10.17,...

CVE-2024-21648

CVE-2024-21648 affects XWiki Platform. The issue is a missing privilege check on the rollback action, allowing a user to rollback a page to gain rights they no longer have. The root cause is insufficient rights verification during rollback. Remediation is available in patched releases: XWiki 14.1...

CVE-2024-21648 XWiki has no right protection on rollback action

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The problem has been patched in XWiki 14.10.17,...

CVE-2024-21648 XWiki has no right protection on rollback action

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The problem has been patched in XWiki 14.10.17,...

CVE-2024-21651 XWiki Denial of Service attack through attachments

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU...

CVE-2024-21651 XWiki Denial of Service attack through attachments

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU...

CVE-2024-21651

CVE-2024-21651 affects XWiki Platform. A user can attach a file to a page that is parsed by Apache Tika as a malformed TAR file, triggering a denial of service through CPU consumption. The vulnerability is mitigated by fixes in XWiki releases 14.10.18, 15.5.3, and 15.8 RC1. The provided sources c...

CVE-2024-21651 XWiki Denial of Service attack through attachments

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cause a denial of service issue via CPU...