Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-uiextension-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2024-31997 EPSS 74%

    XWiki Platform remote code execution from account through UIExtension parameters

    XWiki Platform is a generic wiki platform. Prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, parameters of UI extensions are always interpreted as Velocity code and executed with programming rights. Any user with edit right on any document like the user's ow…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-uiextension-api Maven