Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in xwiki ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und einen Denial-of-Service-Zustand zu verursachen.
Product
XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen
Vulnerabilities 2
-
High 8.7
XWiki's REST APIs don't enforce any limits, leading to unavailability and OOM in large wikis
XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0 contain a REST API which doesn't enforce any limits for the number of items that can be requested in a single request at the…
-
Medium 6.5CVE-2025-66472 Scanner template
XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates ar…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-202430, EUVD-2025-202431
-
#1
Initiale Fassung
References
-
Xwiki GitHub vom 2025-12-09
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7vpr-jm38-wr7w
-
Xwiki GitHub vom 2025-12-09
https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-cc84-q3v3-mhgf