CVE-2023-35161: XWiki >= 6.2-milestone-1 – Cross-Site Scripting
漏洞标题 CVE-2023-35161: XWiki >= 6.2-milestone-1 - Cross-Site Scripting 漏洞描述 XWiki Platform is a generic wiki platform offering runtime services for applications built on t...
CVE-2023-35162: XWiki < 14.10.5 - Cross-Site Scripting
漏洞标题 CVE-2023-35162: XWiki < 14.10.5 - Cross-Site Scripting 漏洞描述 XWiki Platform is vulnerable to reflected XSS via the previewactions template. An attacker can inject Ja...
CVE-2023-37462: XWiki Platform – Remote Code Execution
漏洞标题 CVE-2023-37462: XWiki Platform - Remote Code Execution 漏洞描述 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Im...
CVE-2023-45136: XWiki < 14.10.14 - Cross-Site Scripting
漏洞标题 CVE-2023-45136: XWiki < 14.10.14 - Cross-Site Scripting 漏洞描述 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it...
CVE-2023-46732: XWiki < 14.10.14 - Cross-Site Scripting
漏洞标题 CVE-2023-46732: XWiki < 14.10.14 - Cross-Site Scripting 漏洞描述 XWiki is vulnerable to reflected cross-site scripting (RXSS) via the rev parameter that is used in the ...
CVE-2023-48241: XWiki < 4.10.15 - Information Disclosure
漏洞标题 CVE-2023-48241: XWiki < 4.10.15 - Information Disclosure 漏洞描述 The Solr-based search suggestion provider that also duplicates as generic JavaScript API for search re...
CVE-2023-50719: XWiki < 4.10.15 - Sensitive Information Disclosure
漏洞标题 CVE-2023-50719: XWiki < 4.10.15 - Sensitive Information Disclosure 漏洞描述 XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions...
CVE-2023-50720: XWiki < 4.10.15 - Email Disclosure
漏洞标题 CVE-2023-50720: XWiki < 4.10.15 - Email Disclosure 漏洞描述 The Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email address...
CVE-2024-21650: XWiki < 4.10.20 - Remote code execution
漏洞标题 CVE-2024-21650: XWiki < 4.10.20 - Remote code execution 漏洞描述 XWiki is vulnerable to a remote code execution (RCE) attack through its user registration feature. This...
CVE-2024-31982: XWiki < 4.10.20 - Remote code execution
漏洞标题 CVE-2024-31982: XWiki < 4.10.20 - Remote code execution 漏洞描述 XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4....
CVE-2024-45591: XWiki Platform – Unauthorized Document History Access
漏洞标题 CVE-2024-45591: XWiki Platform - Unauthorized Document History Access 漏洞描述 A vulnerability in XWiki Platform's REST API allows unauthorized users to access docume...
CVE-2025-24893 XWiki 存在远程代码执行漏洞
漏洞标题 CVE-2025-24893 XWiki 存在远程代码执行漏洞 漏洞描述 CVE-2025-24893 XWiki 存在远程代码执行漏洞 PoC代码 暂无
CVE-2025-29925: XWiki REST API – Private Pages Disclosure
漏洞标题 CVE-2025-29925: XWiki REST API - Private Pages Disclosure 漏洞描述 A vulnerability in XWiki's REST API allows unauthenticated users to access information about privat...
CVE-2025-32430: XWiki Platform – Cross-Site Scripting
漏洞标题 CVE-2025-32430: XWiki Platform - Cross-Site Scripting 漏洞描述 XWiki Platform versions >= 4.2-milestone-3 and < 16.4.8, >= 16.5.0-rc-1 and < 16.10.6, and >=...
CVE-2025-32969: XWiki REST API Query – SQL Injection
漏洞标题 CVE-2025-32969: XWiki REST API Query - SQL Injection 漏洞描述 A SQL injection vulnerability exists in XWiki's REST API query endpoint. An unauthenticated attacker can...
CVE-2025-32970: XWiki WYSIWYG API – Open Redirect
漏洞标题 CVE-2025-32970: XWiki WYSIWYG API - Open Redirect 漏洞描述 A vulnerability in XWiki's WYSIWYG API allows an attacker to redirect users to arbitrary external URLs thro...
