Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-rendering-async-macro

2 known vulnerabilities (2 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 critical
Registry
Maven Central

Advisories 2

  • CVE-2023-29526Critical 10.0

    Async and display macro allow displaying and interacting with any document in restricted mode

    Affected: from 10.11.1, fixed in 13.10.11; from 14.0-rc-1, fixed in 14.4.8; from 14.5, fixed in 14.10.3.

  • CVE-2023-26471Critical 10.0

    XWiki Platform users may execute anything with superadmin right through comments and async macro

    Affected: from 11.6-rc-1, fixed in 13.10.10; from 14.0, fixed in 14.4.6; from 14.5, fixed in 14.9.