CVE-2025-53836

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Starting in version 4.2-milestone-1 and prior to versions 13.10.11, 14.4.7, and 14.10, the default macro content parser doesn't preserve the restricte...

CVE-2025-53836

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Starting in version 4.2-milestone-1 and prior to versions 13.10.11, 14.4.7, and 14.10, the default macro content parser doesn't preserve the restricte...

CVE-2025-53836

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Starting in version 4.2-milestone-1 and prior to versions 13.10.11, 14.4.7, and 14.10, the default macro content parser doesn't preserve the restricte...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via improper handling of the restricted attribute of the transformation context during the processing of nested macros. An attacker can execute arbitrary code with elevated privileges by crafting malicious macro...

org.xwiki.rendering:xwiki-rendering-macro-box (>=4.2-milestone-1, <=13.10.10), org.xwiki.rendering:xwiki-rendering-macro-comment (>=4.2-milestone-1, <=13.10.10) +13 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=4.2-milestone-1, <=13.10.10)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =10.2, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =7.3-milestone-1, =13.1-rc-1,...

org.xwiki.rendering:xwiki-rendering-macro-box (>=4.2-milestone-1, <=13.10.10), org.xwiki.rendering:xwiki-rendering-macro-comment (>=4.2-milestone-1, <=13.10.10) +13 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=4.2-milestone-1, <=13.10.10)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =10.2, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =7.3-milestone-1, =13.1-rc-1,...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: OSV:GHSA-32MF-57H2-64X9...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: SNYK:JAVA-ORGXWIKIRENDERING-10743086...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: GHSA-32MF-57H2-64X9...

org.xwiki.rendering:xwiki-rendering-legacy-transformation-macro (>=14.6-rc-1, <=14.9), org.xwiki.rendering:xwiki-rendering-macro-box (>=14.5, <=14.9) +12 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.5, <=14.9)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.5, =14.6-rc-1, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.9 Source cves: CVE-2025-53836 Source advisory: GHSA-32MF-57H2-64X9...

XWiki Rendering security vulnerabilities

XWiki Rendering is a general-purpose rendering system from the XWiki Foundation that converts text input from a given syntax wiki syntax, HTML, etc. to another syntax XHTML, etc.. A security vulnerability exists in XWiki Rendering versions prior to 4.2-milestone-1, prior to 13.10.11, prior to...

org.xwiki.commons:xwiki-commons-diff-script (>=11.6-rc-1, <=14.9), org.xwiki.commons:xwiki-commons-diff-xml (>=11.6-rc-1, <=14.9) +57 more potentially affected by CVE-2023-29528 via org.xwiki.commons:xwiki-commons-xml (>=4.2-milestone-1, <=14.9)

org.xwiki.commons:xwiki-commons-xml MAVEN version =4.2-milestone-1, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =14.8-rc-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =14.8-rc-1,...

Bruised but Not Broken: The Resurgence of the Emotet Botnet Malware

During the first quarter of 2022, we discovered a significant number of infections using multiple new Emotet variants that employed both old and new techniques to trick their intended victims into accessing malicious links and enabling macro content...

CVE-2021-21379

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform, the wikimacrocontent executes the content with the rights of the wiki macro author instead of the caller of that wiki macro. This makes possible to inje...

CVE-2007-0208

CVE-2007-0208 is the Microsoft Word Macro Vulnerability described in MS07-014. Word 2000 SP3, Word 2002/XP SP3, Word 2003 SP2, Works 2004–2006, and Word 2004 for Mac are affected by a flaw where Word does not properly validate the document’s properties, failing to display the macro security warni...