Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

xwiki-commons — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in xwiki-commons, with AI-generated Chinese analysis, references, and POCs.

Vendor: xwiki

CVE IDTitleCVSSSeverityPublished
CVE-2024-31996 XWiki Commons missing escaping of `{` in Velocity escapetool allows remote code execution CWE-95 10.0 Critical2024-04-10
CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml CWE-74 9.1 Critical2023-06-29
CVE-2023-31126 Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml CWE-86 9.1 Critical2023-05-09
CVE-2023-29528 Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml CWE-79 9.1 Critical2023-04-20
CVE-2023-29201 org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability CWE-79 9.1 Critical2023-04-15
CVE-2023-26055 XWiki Commons may allow privilege escalation to programming rights via user's first name CWE-150 10.0 Critical2023-03-02
CVE-2022-24897 Arbitrary filesystem write access from Velocity CWE-22 7.5 High2022-05-02
CVE-2022-24898 Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml CWE-611 4.9 Medium2022-04-28

All 8 known CVE vulnerabilities affecting xwiki-commons with full Chinese analysis, references, and POCs where available.