Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-tag-ui

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.4

    XWiki Platform vulnerable to Cross-Site Request Forgery (CSRF) allowing to delete or rename tags

    XWiki Platform is vulnerable to Cross-Site Request Forgery (CSRF) that may allow attackers to delete or rename tags without needing any confirmation. The problem has been patched in XWiki 13.10.7, 14.4.1 and 14.5RC1. Workarounds: It's possible to patch existi…