Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-scheduler-ui

4 known vulnerabilities (2 critical, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 critical, 2 medium
Registry
Maven Central

Advisories 4

  • CVE-2024-55876Medium 5.4

    XWiki's scheduler in subwiki allows scheduling operations for any main wiki user

    Affected: from 1.2-milestone-2, fixed in 15.10.9; from 16.0.0-rc-1, fixed in 16.3.0.

  • CVE-2024-31986Critical 9.1

    XWiki Platform CSRF remote code execution through scheduler job's document reference

    Affected: from 3.1, fixed in 14.10.19; from 15.0-rc-1, fixed in 15.5.4; from 15.6-rc-1, fixed in 15.9.

  • CVE-2024-31985Medium 5.4

    XWiki Platform CSRF in the job scheduler

    Affected: from 3.1, fixed in 14.10.19; from 15.0-rc-1, fixed in 15.5.4; from 15.6-rc-1, fixed in 15.9.

  • CVE-2023-29524Critical 10.0

    Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform

    Affected: from 2.0.1, fixed in 14.10.3.