Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-icon-ui

3 known vulnerabilities (3 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 critical
Registry
Maven Central

Advisories 3

  • CVE-2023-36470Critical 10.0

    Code injection in icon themes of XWiki Platform

    Affected: from 6.2-milestone-1, fixed in 14.10.6; from 15.0-rc-1, fixed in 15.2-rc-1.

  • CVE-2023-26472Critical 10.0

    XWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile

    Affected: from 6.2-milestone-1, fixed in 13.10.10; from 14.0, fixed in 14.4.6; from 14.5, fixed in 14.9.

  • CVE-2022-41931Critical 9.9

    Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui

    Affected: from 6.4-milestone-2, fixed in 13.10.7; from 14.0.0, fixed in 14.4.2.