org.xwiki.platform:xwiki-platform-web (Maven)
Advisories
12
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 14.10.12 or later clears every advisory below that has a fix.
Upgrade commands
maven
<dependency><groupId>org.xwiki.platform</groupId><artifactId>xwiki-platform-web</artifactId><version>14.10.12</version></dependency>gradle
implementation("org.xwiki.platform:xwiki-platform-web:14.10.12")Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-93gh-jgjj-r929 XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages |
Medium EPSS 0.75% |
>= 3.1-milestone-2, < 13.4-rc-1 | 13.4-rc-1 |
| GHSA-ghf6-2f42-mjh9 XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title |
High EPSS 1.91% |
>= 7.2-milestone-2, < 14.10.12 | 14.10.12 |
| GHSA-gr82-8fj2-ggc3 XWiki Platform XSS vulnerability from account in the create page form via template provider |
Critical EPSS 2.02% |
>= 3.1-milestone-1, < 13.4-rc-1 | 13.4-rc-1 |
| GHSA-fp7h-f9f5-x4q7 XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template |
Medium EPSS 0.71% |
>= 2.2.1, < 14.4.8 | 14.4.8 |
| GHSA-6vgh-9r3c-2cxp Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro |
Critical EPSS 1.39% |
>= 14.0-rc-1, < 14.4.6 | 14.4.6 |
| GHSA-6vgh-9r3c-2cxp Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro |
Critical EPSS 1.39% |
>= 14.5, < 14.9 | 14.9 |
| GHSA-6vgh-9r3c-2cxp Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro |
Critical EPSS 1.39% |
>= 1.9-milestone-2, < 13.10.10 | 13.10.10 |
| GHSA-599v-w48h-rjrm XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor |
High EPSS 0.83% |
>= 14.0, < 14.2 | 14.2 |
| GHSA-h5j3-5x63-p8jv XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard |
High EPSS 0.88% |
>= 8.0-rc-1, < 13.10.5 | 13.10.5 |
| GHSA-h5j3-5x63-p8jv XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard |
High EPSS 0.88% |
>= 14.0, < 14.3-rc-1 | 14.3-rc-1 |
| GHSA-5c66-v29h-xjh8 XSS Cross Site Scripting |
Critical EPSS 1.12% |
>= 12.6.4, < 12.8 | 12.8 |
| GHSA-5c66-v29h-xjh8 XSS Cross Site Scripting |
Critical EPSS 1.12% |
< 12.6.3 | 12.6.3 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor