Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-help-ui

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 10.0
    CVE-2024-55877

    XWiki allows remote code execution from account through macro descriptions and XWiki.XWikiSyntaxMacrosList

    XWiki Platform is a generic wiki platform. Starting in version 9.7-rc-1 and prior to versions 15.10.11, 16.4.1, and 16.5.0, any user with an account can perform arbitrary remote code execution by adding instances of `XWiki.WikiMacroClass` to any page. This co…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-help-ui Maven
  • Critical 10.0
    CVE-2023-35166 EPSS 62%

    Privilege escalation (PR) from account through TipsPanel

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-help-ui Maven