Skip to content
OpenAdvisories

Package · Maven

org.xwiki.rendering:xwiki-rendering-xml

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

    XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient prot…