Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-notifications-ui

4 known vulnerabilities (2 critical, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 critical, 2 medium
Registry
Maven Central

Advisories 4

  • CVE-2024-46978Medium 6.5

    Missing checks for notification filter preferences editions in XWiki Platform

    Affected: from 13.2-rc-1, fixed in 14.10.21; from 15.0-rc-1, fixed in 15.5.5; from 15.6-rc-1, fixed in 15.10.1.

  • CVE-2024-46979Medium 5.3

    Data leak of notification filters of users in XWiki Platform

    Affected: from 13.2-rc-1, fixed in 14.10.21; from 15.0-rc-1, fixed in 15.5.5; from 15.6-rc-1, fixed in 15.10.1.

  • CVE-2023-36469Critical 10.0

    Code injection through NotificationRSSService in XWiki Platform

    Affected: from 9.6-rc-1, fixed in 14.10.6; from 15.0-rc-1, fixed in 15.2-rc-1.

  • CVE-2023-29210Critical 10.0

    org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability

    Affected: from 13.2-rc-1, fixed in 13.10.11; from 14.0-rc-1, fixed in 14.4.7; from 14.5, fixed in 14.10.