Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-notifications-ui

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-36469 EPSS 82%

    Code injection through NotificationRSSService in XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile and notification settings can execute arbitrary script macros including Groovy and Python macros that allow r…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-notifications-ui Maven
  • Critical 10.0
    CVE-2023-29210

    org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability

    XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents including the notification preferences macros can execute arbitrary Groovy, Python or Velocity code in XWiki lea…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-notifications-ui Maven