Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki

4 known vulnerabilities (2 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 critical, 2 high
Registry
Maven Central

Advisories 4

  • CVE-2023-29211Critical 10.0

    org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability

    Affected: from 5.3-milestone-2, fixed in 13.10.11; from 14.0-rc-1, fixed in 14.4.7; from 14.5, fixed in 14.10.

  • Two XWiki Platform UIs Expose Sensitive Information to an Unauthorized Actor

    Affected: from 3.2-m3, fixed in 13.4.4; from 13.5.0, fixed in 13.10.9; from 14.0.0, fixed in 14.7-rc-1.

  • CVE-2022-36099Critical 9.9

    XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability

    Affected: from 5.3-milestone-2, fixed in 13.10.6; from 14.0, fixed in 14.4.

  • Cross-site Scripting in XWiki Platform Wiki UI Main Wiki

    Affected: fixed in 12.10.11; from 13.0.0, fixed in 13.4.7; from 13.5.0, fixed in 13.10.3.