Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-distribution-war

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32429 Public exploit Scanner template EPSS 85%

    XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocu…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-distribution-war Maven