Skip to content
OpenAdvisories
Medium WID-SEC-2026-1645 2 CVEs

xwiki: Mehrere Schwachstellen

Published May 21, 2026 · Updated Aug 10, 2026 · Revision 3 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in xwiki ausnutzen, um Dateien zu manipulieren und Informationen offenzulegen.

Product

XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen

Vulnerabilities 2

  • High 7.5
    CVE-2026-48048 Scanner template

    XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

    XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the `LiveTabl…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-livetable-ui Maven
  • Medium 5.9
    CVE-2026-48047

    XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin

    XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar ex…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-webjars-api Maven

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-55658

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-54714

  3. #1

    Initiale Fassung

References