Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-search-ui

4 known vulnerabilities (4 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 critical
Registry
Maven Central

Advisories 4

  • CVE-2024-37901Critical 10.0

    XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet

    Affected: from 9.2-rc-1, fixed in 14.10.21; from 15.0-rc-1, fixed in 15.5.5; from 15.6-rc-1, fixed in 15.10.2.

  • CVE-2024-31982Critical 10.0

    XWiki Platform: Remote code execution as guest via DatabaseSearch

    Affected: from 2.4-milestone-1, fixed in 14.10.20; from 15.0-rc-1, fixed in 15.5.4; from 15.6-rc-1, fixed in 15.10-rc-1.

  • CVE-2024-31465Critical 10.0

    XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet

    Affected: from 5.2-milestone-2, fixed in 14.10.20; from 15.0-rc-1, fixed in 15.5.4; from 15.6-rc-1, fixed in 15.10-rc-1.

  • CVE-2023-50721Critical 10.0

    XWiki Platform RCE from account through SearchAdmin

    Affected: from 4.5-rc-1, fixed in 14.10.15; from 15.0-rc-1, fixed in 15.5.2; from 15.6-rc-1, fixed in 15.7-rc-1.