Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-distribution-war

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2024-55663

    XWiki Platform has an SQL injection in getdocuments.vm with sort parameter

    XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 13.10.5 and 14.3-rc-1, in `getdocument.vm`; the ordering of the returned documents is defined from an unsanitized request parameter (request.sort) and can all…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-distribution-war Maven
  • High 7.5
    CVE-2024-21651

    XWiki Denial of Service attack through attachments

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can post a malformed TAR file by manipulating file modification times headers, which when parsed by Tika, could cau…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-distribution-war Maven