Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-flamingo-theme-ui

4 known vulnerabilities (3 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 critical, 1 high
Registry
Maven Central

Advisories 4

  • CVE-2023-30537Critical 9.9

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation

    Affected: from 12.6.6, fixed in 13.10.11; from 14.0-rc-1, fixed in 14.4.7; from 14.5, fixed in 14.10.

  • CVE-2023-29509Critical 10.0

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

    Affected: from 7.2-rc-1, fixed in 13.10.11; from 14.0-rc-1, fixed in 14.4.7; from 14.5, fixed in 14.10.

  • CVE-2023-26477Critical 10.0

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

    Affected: from 6.2.4, fixed in 13.10.10; from 14.0, fixed in 14.4.6; from 14.5, fixed in 14.9-rc-1.

  • Cross-site Scripting in the Flamingo theme manager

    Affected: fixed in 12.10.11; from 13.0.0, fixed in 13.4.7; from 13.5.0, fixed in 13.10.3.