Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-rendering-wikimacro-store

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 high
Registry
Maven Central

Advisories 2

  • XWiki allows remote code execution through default value of wiki macro wiki-type parameters

    Affected: from 11.10.11; from 12.6.3; from 12.8-rc-1, fixed in 16.4.7; from 16.5.0-rc-1, fixed in 16.10.3; from 17.0.0-rc-1, fixed in 17.0.0.

  • It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro

    Affected: from 11.4, fixed in 11.10.11; from 12.0, fixed in 12.6.3; from 12.7, fixed in 12.8.