Exposición de XWiki

Wikis
327
score de exposición
34
sitios usan
1
en explotación
122
críticos

CVEs

250 resultados
CVE-2023-29514CRITICALCode injection in template provider administration in xwiki-platformEPSS 1.9%CVE-2023-29522CRITICALCode injection from view right on XWiki.ClassSheet in xwiki-platformEPSS 1.9%CVE-2023-37914CRITICALPrivilege escalation (PR)/RCE from account through Invitation subject/messageEPSS 1.9%CVE-2023-36468CRITICALUpgrading doesn't prevent exploiting vulnerable XWiki documentsEPSS 1.9%CVE-2025-55748CRITICALXWiki Platform's configuration files can be accessed through jsx and sx endpointsEPSS 1.8%CVE-2022-24897HIGHArbitrary filesystem write access from VelocityEPSS 1.8%CVE-2023-29204MEDIUMURL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcoreEPSS 1.8%CVE-2025-55747CRITICALXWiki Platform's configuration files can be accessed through the webjars APIEPSS 1.8%CVE-2023-29506MEDIUMorg.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticated endpointsEPSS 1.7%CVE-2024-41947CRITICALXWiki Platform XSS through conflict resolutionEPSS 1.7%CVE-2024-55877CRITICALXWiki allows remote code execution from account through macro descriptions and XWiki.XWikiSyntaxMacrosListEPSS 1.6%CVE-2025-55749HIGHThe XWiki Jetty package (XJetty) allows accessing any application file through URLEPSS 1.6%CVE-2025-53837CRITICALorg.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issueEPSS 1.5%CVE-2023-35155HIGHXWiki Platform vulnerable to cross-site scripting in target parameter via share page by emailEPSS 1.5%CVE-2022-24898MEDIUMArbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xmlEPSS 1.5%CVE-2022-31166HIGHXWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groupsEPSS 1.5%CVE-2025-54125HIGHXWiki Platform: Password and email exposure in xml.vm fieldsEPSS 1.5%CVE-2023-37912CRITICALXWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macroEPSS 1.5%CVE-2024-31983CRITICALXWiki Platform: Remote code execution from edit in multilingual wikis via translationsEPSS 1.4%CVE-2024-31987CRITICALXWiki Platform remote code execution from account via custom skins supportEPSS 1.4%