org.xwiki.platform:xwiki-platform-rest-server
Maven5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.xwiki.platform:xwiki-platform-rest-serverpage 1 of 1
- CVE-2022-41936MEDIUMCVSS 5.3EG 5.3✓ Fixed in 14.62022-11-22
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modifications` rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unaut…
- CVE-2023-35151HIGHCVSS 7.5EG 7.5✓ Fixed in 15.12023-06-23
XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a REST endpoint and obtain the obfuscated passwords, even when the mail obfuscation is activat…
- CVE-2023-37277CRITICALCVSS 9.6EG 9.6✓ Fixed in 15.22023-07-10
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API allows executing all actions via POST requests and accepts `text/plain`, `multipart/form-data` or `application/www-form-u…
- CVE-2024-45591MEDIUMCVSS 5.3EG 5.3✓ Fixed in 16.3.0-rc-12024-09-10
XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the ver…
- CVE-2025-52472NONECVSS 0.0EG 0.0✓ Fixed in 16.10.92025-10-06
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL inject…
Check whether org.xwiki.platform:xwiki-platform-rest-server is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.xwiki.platform:xwiki-platform-rest-server CVEs against the assets you own.
Start Free Scan →