Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.rendering:xwiki-rendering-xml

3 known vulnerabilities (2 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 critical, 1 high
Dependents
18
Registry
Maven Central

Advisories 3

  • CVE-2025-53837Critical 9.9

    org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

    Affected: fixed in 14.10.2.

  • XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

    Affected: fixed in 16.10.10; from 17.0.0-rc-1, fixed in 17.4.3; from 17.5.0-rc-1, fixed in 17.6.0-rc-1.

  • CVE-2023-37908Critical 9.1

    org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

    Affected: from 14.6-rc-1, fixed in 14.10.4.