org.xwiki.platform:xwiki-platform-search-solr-api
Maven3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.xwiki.platform:xwiki-platform-search-solr-apipage 1 of 1
- CVE-2023-50719CRITICALCVSS 7.5EG 9.0fixed in 14.10.15, 15.5.2 or 15.7-rc-1, by version range2023-12-15
XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respec…
- CVE-2023-50720HIGHCVSS 5.3EG 7.3fixed in 14.10.15, 15.5.2 or 15.7-rc-1, by version range2023-12-15
XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email addresses is enabled. To demonstrate the vul…
- CVE-2025-32971LOWCVSS 3.8EG 3.8fixed in 15.10.13, 16.4.4 or 16.8.0-rc-1, by version range2025-04-30
XWiki is a generic wiki platform. In versions starting from 4.5.1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the Solr script service doesn't take dropped programming rights into accou…
Check whether org.xwiki.platform:xwiki-platform-search-solr-api is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.xwiki.platform:xwiki-platform-search-solr-api CVEs against the assets you own.
Book a Demo →