Maven package
org.xwiki.platform/xwiki-platform-web-templates
pkg:maven/org.xwiki.platform/xwiki-platform-web-templates
Vulnerabilities (23)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-36091 | — | >= 1.3, < 13.10.4 | 13.10.4 | Sep 8, 2022 | XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. Through the suggestion feature, string and list properties of objects the user shouldn't have access to can be accessed in versions prior to 13.10.4 and 14.2. This includes private personal in | ||
| CVE-2022-24819 | — | < 12.10.11 | 12.10.11 | Apr 8, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents related to users of the wiki. The problem has been patched in XWiki versions 12.10.11, 13.4.4 | ||
| CVE-2022-23622 | — | >= 2.6.1, < 12.10.11 | 12.10.11 | Feb 9, 2022 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is a cross site scripting (XSS) vector in the `registerinline.vm` template related to the `xredirect` hidden field. This template is only used in th |
- CVE-2022-36091Sep 8, 2022affected >= 1.3, < 13.10.4fixed 13.10.4
XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. Through the suggestion feature, string and list properties of objects the user shouldn't have access to can be accessed in versions prior to 13.10.4 and 14.2. This includes private personal in
- CVE-2022-24819Apr 8, 2022affected < 12.10.11fixed 12.10.11
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents related to users of the wiki. The problem has been patched in XWiki versions 12.10.11, 13.4.4
- CVE-2022-23622Feb 9, 2022affected >= 2.6.1, < 12.10.11fixed 12.10.11
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is a cross site scripting (XSS) vector in the `registerinline.vm` template related to the `xredirect` hidden field. This template is only used in th
Page 2 of 2