Maven package
org.xwiki.platform/xwiki-platform-rendering-async-macro
pkg:maven/org.xwiki.platform/xwiki-platform-rendering-async-macro
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-29526 | — | >= 10.11.1, < 13.10.11 | 13.10.11 | Apr 18, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to display or interact with any page a user cannot access through the combination of the async and display macros. A comment with either mac | ||
| CVE-2023-26471 | — | >= 11.6-rc-1, < 13.10.10 | 13.10.10 | Mar 2, 2023 | XWiki Platform is a generic wiki platform. Starting in version 11.6-rc-1, comments are supposed to be executed with the right of superadmin but in restricted mode (anything dangerous is disabled), but the async macro does not take into account the restricted mode. This means that |
- CVE-2023-29526Apr 18, 2023affected >= 10.11.1, < 13.10.11fixed 13.10.11
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to display or interact with any page a user cannot access through the combination of the async and display macros. A comment with either mac
- CVE-2023-26471Mar 2, 2023affected >= 11.6-rc-1, < 13.10.10fixed 13.10.10
XWiki Platform is a generic wiki platform. Starting in version 11.6-rc-1, comments are supposed to be executed with the right of superadmin but in restricted mode (anything dangerous is disabled), but the async macro does not take into account the restricted mode. This means that