Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-diff-xml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2023-48240

    XWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgery

    XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference for an actually unchanged image. For this, XWiki requests all embedded images on the server side. These request…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-diff-xml Maven