CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

org.xwiki.rendering:xwiki-rendering-macro-html (5.2-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (5.2-milestone-1) +7 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.2-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.2), org.xwiki.rendering:xwiki-rendering-standalone (5.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.2.2), org.xwiki.rendering:xwiki-rendering-standalone (5.2.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.2.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.2.3), org.xwiki.rendering:xwiki-rendering-standalone (5.2.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.2.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.3-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (5.3-milestone-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.3-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.3-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.3-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.3-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (5.3-milestone-2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.3-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.3-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.3-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (5.4-milestone-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.4-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (5.4-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.4-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4.5), org.xwiki.rendering:xwiki-rendering-standalone (5.4.5) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.4.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4.7), org.xwiki.rendering:xwiki-rendering-standalone (5.4.7) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.4.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.0-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (6.0-milestone-2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.0-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.0-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.0-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.0), org.xwiki.rendering:xwiki-rendering-standalone (6.0) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.0)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.0 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.1-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (6.1-milestone-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.1-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.1-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.1-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.1-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (6.1-milestone-2) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.1-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.1-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.1-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.1-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (6.1-rc-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.1-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.1-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.1-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.1), org.xwiki.rendering:xwiki-rendering-standalone (6.1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.2-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (6.2-milestone-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.2-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.2-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.2-milestone-1 -...