org.xwiki.platform:xwiki-platform-tag-ui

2 results · Feed

• High 7.4
  CVE-2022-41927

  XWiki Platform vulnerable to Cross-Site Request Forgery (CSRF) allowing to delete or rename tags

  XWiki Platform is vulnerable to Cross-Site Request Forgery (CSRF) that may allow attackers to delete or rename tags without needing any confirmation. The problem has been patched in XWiki 13.10.7, 14.4.1 and 14.5RC1. Workarounds: It's possible to patch existi…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-tag-ui Maven
  Nov 23, 2022
• Critical 9.9
  CVE-2022-36100 EPSS 74%

  XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection

  XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Starting with version 1.7 in XWiki Platform Applications Tag and prior to 13.10.6 and 14.4 in XWiki Platform Tag UI, the tags document `Main.Tag…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-tag-ui org.xwiki.platform.applications:xwiki-application-tag Maven
  Sep 8, 2022