Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-attachment-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2023-37910

    org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment move support in version 14.0-rc-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, an attacker with edit…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-attachment-api Maven