VYPR

Maven package

org.xwiki.platform/xwiki-platform-office-importer

pkg:maven/org.xwiki.platform/xwiki-platform-office-importer

Vulnerabilities (1)

  • CVE-2023-37913Oct 25, 2023
    affected >= 3.5-milestone-1, < 14.10.8fixed 14.10.8

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 3.5-milestone-1 and prior to versions 14.10.8 and 15.3-rc-1, triggering the office converter with a specially crafted file name allows writing the attachme