Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-rest-server

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-46554 Scanner template

    XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API

    XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.7.0, anyone can access the metadata of any attachment in the wiki usi…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-rest-server Maven
  • Medium 5.3
    CVE-2024-45591 Scanner template

    XWiki Platform document history including authors of any page exposed to unauthorized actors

    XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the aut…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-rest-server Maven
  • Medium 5.3
    CVE-2022-41936

    Exposure of Private Personal Information to an Unauthorized Actor in xwiki-platform-rest-server

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modifications` rest endpoint does not filter out entries according to the user's rights. Therefore, information hidden from unauthorized users are ex…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-rest-server Maven