Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

xwiki-platform — Vulnerabilities & Security Advisories 232

All 232 CVE vulnerabilities found in xwiki-platform, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of Common Weakness Enumerations (CWE) affecting the xwiki-platform, developed by XWiki SAS. It serves as a centralized resource for security professionals and developers seeking to understand the historical and current security posture of this specific open-source wiki software solution. The content on this page collects a wide variety of vulnerability types, including cross-site scripting, improper access control, and information disclosure flaws. The data covers incidents reported from the early 2010s through recent years, capturing the evolution of security issues associated with the platform over time. By navigating this aggregation, users can efficiently track vendor advisories and releases from XWiki to stay informed about critical patches and mitigation strategies. Additionally, visitors can deepen their understanding of specific weakness classes by examining how they manifest within the architectural context of xwiki-platform. The page also allows users to look up a product's vulnerability history, providing a chronological view of defects that have been identified and resolved. This historical perspective helps in assessing the long-term security reliability of the software and identifying recurring patterns in defect discovery. The resource is designed to facilitate thorough security analysis without requiring external database searches, consolidating disparate reports into a single, coherent view. It is important to note that this information is intended for educational and risk assessment purposes, aiding in the development of more secure coding practices and robust defensive configurations for systems relying on xwiki-platform.

Vendor: xwiki

CVE ID Title CVSS Severity Published
CVE-2022-24819 Unauthenticated user can retrieve the list of users through uorgsuggest.vm CWE-359 5.3 Medium 2022-04-08
CVE-2022-24821 Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx CWE-648 6.8 Medium 2022-04-08
CVE-2022-23622 Cross site scripting in registration template in xwiki-platform CWE-79 7.4 High 2022-02-09
CVE-2022-23621 Missing authorization in xwiki-platform CWE-862 5.5 Medium 2022-02-09
CVE-2022-23620 Path traversal in xwiki-platform-skin-skinx CWE-22 6.8 Medium 2022-02-09
CVE-2022-23619 Information exposure in xwiki-platform CWE-200 5.3 Medium 2022-02-09
CVE-2022-23618 Open Redirect in xwiki-platform CWE-601 4.7 Medium 2022-02-09
CVE-2022-23617 Missing authorization in xwiki-platform CWE-862 6.5 Medium 2022-02-09
CVE-2022-23616 Remote code execution in xwiki-platform CWE-74 8.8 High 2022-02-09
CVE-2022-23615 Partial authorization bypass on document save in xwiki-platform CWE-863 5.4 Medium 2022-02-09
CVE-2021-43841 XSS by SVG upload in xwiki-platform CWE-79 5.4 Medium 2022-02-04
CVE-2021-32732 Cross-Site Request Forgery in xwiki-platform CWE-352 7.5 High 2022-02-04
CVE-2021-32731 The reset password form reveal users email address CWE-200 5.3 Medium 2021-07-01
CVE-2021-32730 No CSRF protection on the password change form CWE-352 5.7 Medium 2021-07-01
CVE-2021-32729 A user without PR can reset user authentication failures information CWE-693 2.0 Low 2021-07-01
CVE-2021-32620 Users registered with email verification can self re-activate their disabled accounts CWE-285 8.8 High 2021-05-28
CVE-2021-32621 Script injection without script or programming rights through Gadget titles CWE-94 8.8 High 2021-05-28
CVE-2021-29459 XSS Cross Site Scripting CWE-79 9.6 Critical 2021-04-20
CVE-2021-21380 Rating Script Service expose XWiki to SQL injection CWE-89 7.7 High 2021-03-23
CVE-2021-21379 It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro CWE-281 7.7 High 2021-03-12
CVE-2020-15252 RCE in XWiki CWE-94 8.5 High 2020-10-16
CVE-2020-15171 Users with SCRIPT rights can execute arbitrary code in XWiki CWE-94 6.6 Medium 2020-09-10

All 232 known CVE vulnerabilities affecting xwiki-platform with full Chinese analysis, references, and POCs where available.