Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-notifications-ui

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Missing checks for notification filter preferences editions in XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of a notification filter preference of another user, to enable/disable it or even delete it. The impact is that …

  • Medium 5.3

    Data leak of notification filters of users in XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification filters of any user by using a URL such as `<hostname>xwiki/bin/get/XWiki/Notifications/Code/NotificationFilte…