XWiki Xwiki Commons Vulnerabilities

Xwiki Xwiki Commons vulnerabilities.

10 April 2024

XWiki Platform Vulnerability Affects Remote Code Execution
CVE-2024-31996
XwikiXwiki-commons9.8CRITICAL

29 June 2023

HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml
CVE-2023-36471
XwikiXwiki-commons9.1CRITICAL

9 May 2023

Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
CVE-2023-31126
xwikixwiki-commons9.6CRITICAL

20 April 2023

Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
CVE-2023-29528
xwikixwiki-commons9CRITICAL

15 April 2023

org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
CVE-2023-29201
xwikixwiki-commons9CRITICAL

2 March 2023

XWiki Commons may allow privilege escalation to programming rights via user's first name
CVE-2023-26055
xwikixwiki-commons9.9CRITICAL

2 May 2022

Arbitrary filesystem write access from Velocity
CVE-2022-24897
XwikiXwiki-commons7.5HIGH

28 April 2022

Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
CVE-2022-24898
XwikiXwiki-commons4.9MEDIUM

No more vulnerabilities to load.