org.xwiki.platform:xwiki-platform-rendering-macro-context

2 results · Feed

• High 8.6
  CVE-2025-49582

  XWiki's required right warnings for macros are incomplete

  XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights ana…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-security-requiredrights-default org.xwiki.platform:xwiki-platform-rendering-macro-context Maven
  Jun 13, 2025
• Medium 5.4
  CVE-2023-26056

  XWiki Platform allows macro execution as any user without programming rights through the context macro

  XWiki Platform is a generic wiki platform. Starting in version 3.0-milestone-1, it's possible to execute a script with the right of another user, provided the target user does not have programming right. The problem has been patched in XWiki 14.8-rc-1, 14.4.5…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-rendering-macro-context Maven
  Mar 2, 2023