VYPR

Maven package

org.xwiki.platform/xwiki-platform-attachment-api

pkg:maven/org.xwiki.platform/xwiki-platform-attachment-api

Vulnerabilities (1)

  • CVE-2023-37910Oct 25, 2023
    affected >= 14.0-rc-1, < 14.4.8fixed 14.4.8

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment move support in version 14.0-rc-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, an attacker with edit access on any docume