Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-livetable-ui

5 known vulnerabilities (3 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 high, 2 medium
Registry
Maven Central

Advisories 5

  • XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

    Affected: from 6.2.1, fixed in 16.10.17; from 17.0.0-rc-1, fixed in 17.4.9; from 17.5.0-rc-1, fixed in 17.10.3.

  • CVE-2023-38509Medium 4.3

    XWiki Platform's obfuscated email addresses should not be sorted

    Affected: from 3.5-milestone-1, fixed in 14.10.9; from 15.0, fixed in 15.3-rc-1.

  • XWiki Platform may retrieve email addresses of all users

    Affected: from 3.5-milestone-1, fixed in 14.4.8; from 14.5, fixed in 14.10.4.

  • Two XWiki Platform UIs Expose Sensitive Information to an Unauthorized Actor

    Affected: from 3.2-m3, fixed in 13.4.4; from 13.5.0, fixed in 13.10.9; from 14.0.0, fixed in 14.7-rc-1.

  • CVE-2022-41935Medium 5.3

    Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui

    Affected: from 12.10.11, fixed in 13.10.8; from 14.0.0, fixed in 14.4.3; from 14.5.0, fixed in 14.6-rc-1.