PT-2023-29431 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 12.0-rc-1 through 12.10.11 XWiki Platform versions 15.5-rc-1 and prior Description: The XWiki Platform is vulnerable to a reflected cross-site scripting attack in the page creation form when document names are validate...

PT-2023-29430 · Xwiki · Xwiki Platform +2

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.1-milestone-1 through 13.4-rc-1 org.xwiki.platform:xwiki-platform-web-templates versions prior to 14.10.2 and 15.5-rc-1 org.xwiki.platform:xwiki-web-standard versions 2.4-milestone-2 through 3.1-milestone-1...

PT-2023-29432 · Xwiki · Xwiki Platform +1

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.1-milestone-2 through 13.4-rc-1 org.xwiki.platform:xwiki-platform-web-templates versions prior to 14.10.12 and 15.5-rc-1 Description: The issue arises when trying to create a document that already exists, and XWiki...

PT-2023-26181 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.5-milestone-1 through 14.10.7 XWiki Platform versions 15.3-rc-1 and earlier Description: Triggering the office converter with a specially crafted file name allows writing the attachment's content to an...

PT-2024-24346 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.0.1 through 4.10.18 XWiki Platform versions 15.5.4 and earlier XWiki Platform versions prior to 15.10-rc-1 Description: The HTML escaping tool used in XWiki does not escape , which can allow XWiki syntax injection an...

PT-2024-24333 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.0.1 through 4.10.19 XWiki Platform versions 14.10.19 and earlier XWiki Platform versions 15.5.3 and earlier XWiki Platform versions prior to 15.10-rc-1 Description: XWiki Platform is a generic wiki platform. Remote...

The vulnerability of the integration interface of CKEditor, a platform for creating collaborative web applications like XWiki Platform XWiki, arises from insufficient verification of the authenticity of executed requests. This allows attackers to carry out CSRF attacks.

The vulnerability of the CKEditor integration interface in the XWiki platform, which is used for creating collaborative web applications, stems from insufficient verification of the authenticity of executed requests. Exploiting this vulnerability could allow a malicious actor to carry out a CSRF...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute arbitrary code.

The vulnerability of the XWiki Platform lies in its lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the XWiki platform, which involves exposing information in the wrong data area, allows a hacker to obtain the email addresses of all users.

The vulnerability of the XWiki Platform lies in the exposure of information in the error data area. Exploiting this vulnerability could allow a malicious actor to obtain the email addresses of all users...

The vulnerability of the XWiki Platform, related to the failure to implement measures to neutralize instructions in dynamically executed code, allows a perpetrator to execute arbitrary code with root privileges.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in its lack of protection for website structures. This allows attackers to insert arbitrary information into wiki projects.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to insert arbitrary information into the wiki project remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, stems from the lack of protective measures for website structures. This allows attackers to carry out Cross-Site Scripting (XSS) attacks.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks XSS remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within it, allowing attackers to execute arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the XWiki platform for creating collaborative web applications lies in authentication errors, which allow a malicious user to execute arbitrary web scripts with elevated privileges.

The vulnerability of the XWiki Platform lies in authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary web scripts with elevated privileges...

The vulnerability of the Xwiki Commons modules on the XWiki platform, which is used for creating collaborative web applications. This allows a hacker to execute arbitrary code.

The vulnerability of the XWiki Commons modules on the XWiki platform, which is used for creating collaborative web applications, stems from the failure to address the issue of eliminating special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, related to improper code generation, allows attackers to execute arbitrary code.

The vulnerability of the XWiki Platform lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, stems from insufficient verification of the authenticity of executed requests. This allows attackers to carry out CSRF attacks.

The vulnerability of the XWiki Platform lies in the insufficient verification of the authenticity of executed requests. Exploiting this vulnerability could allow a malicious actor to carry out a CSRF attack remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within it, allowing attackers to execute arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, stems from the lack of measures to neutralize instructions in dynamically executed code. This allows attackers to increase their privileges.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize instructions within the dynamically executed code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the XWiki platform, which is related to the failure to implement measures to neutralize instructions in dynamically executed code, allows a perpetrator to execute arbitrary code.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize instructions within the dynamically executed code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...