Skip to content
OpenAdvisories

Package · Maven

org.xwiki.commons:xwiki-commons-xml

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2022-24898

    Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml

    org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects. Starting in version 2.7 and prior to versions 12.10.10, 13.4.4, and 13.8-rc-1, it is possible for a script to access any file accessing to the user running XWiki ap…

    xwiki xwiki-commons org.xwiki.commons:xwiki-commons-xml Maven