Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-invitation-ui

3 known vulnerabilities (3 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 critical
Registry
Maven Central

Advisories 3

  • CVE-2023-37914Critical 9.9

    Privilege escalation (PR)/RCE from account through Invitation subject/message

    Affected: from 2.5-m-1, fixed in 14.4.8; from 14.5, fixed in 14.10.6; from 15.0-rc-1, fixed in 15.2-rc-1.

  • CVE-2023-35150Critical 9.9

    XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application

    Affected: from 2.4-m-2, fixed in 14.4.8; from 14.5, fixed in 14.10.4; from 15.0-rc-1, fixed in 15.0.

  • CVE-2023-29518Critical 9.9

    Code injection from view right using Invitation.InvitationCommon in xwiki-platform

    Affected: from 2.5-m-1, fixed in 13.10.11; from 14.0-rc-1, fixed in 14.4.8; from 14.5, fixed in 14.10.1.