org.xwiki.platform:xwiki-platform-appwithinminutes-ui
Maven5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.xwiki.platform:xwiki-platform-appwithinminutes-uipage 1 of 1
- CVE-2023-29515HIGHCVSS 7.7EG 7.7fixed in 13.10.11, 14.4.8 or 14.10.1, by version range2023-04-19
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can create a space can become admin of that space through App Within Minutes. The admin right implies the script right an…
- CVE-2023-29527CRITICALCVSS 9.9EG 9.9fixed in 14.10.32023-04-19
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions a user without script or programming right may edit a user profile (or any other document) with the wiki editor a…
- CVE-2023-35153CRITICALCVSS 9.0EG 9.0fixed in 14.4.8, 14.10.4 or 15.0, by version range2023-06-23
XWiki Platform is a generic wiki platform. Starting in version 5.4.4 and prior to versions 14.4.8, 14.10.4, and 15.0, a stored cross-site scripting vulnerability can be exploited by users with edit rights by adding a `AppWithinMinutes.Form…
- CVE-2023-35161CRITICALCVSS 9.6EG 9.6fixed in 14.10.5 or 15.1-rc-1, by version range2023-06-23
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the DeleteAppl…
- CVE-2023-40177CRITICALCVSS 9.9EG 9.9fixed in 14.10.52023-08-23
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can use the content field of their user profile page to execute arbitrary scripts with programming rights, thus ef…
Check whether org.xwiki.platform:xwiki-platform-appwithinminutes-ui is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.xwiki.platform:xwiki-platform-appwithinminutes-ui CVEs against the assets you own.
Book a Demo →