VYPR

Maven package

org.xwiki.platform/xwiki-platform-store-filesystem-oldcore

pkg:maven/org.xwiki.platform/xwiki-platform-store-filesystem-oldcore

Vulnerabilities (1)

  • CVE-2023-26478Mar 2, 2023
    affected >= 14.3-rc-1, < 14.4.6fixed 14.4.6

    XWiki Platform is a generic wiki platform. Starting in version 14.3-rc-1, `org.xwiki.store.script.TemporaryAttachmentsScriptService#uploadTemporaryAttachment` returns an instance of `com.xpn.xwiki.doc.XWikiAttachment`. This class is not supported to be exposed to users without th