Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

xwikisas — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting xwikisas. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Xwikisas is an enterprise collaboration platform used for wiki, application development, and document management. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting attacks, and privilege escalation flaws, with 18 CVEs documented. The platform's Java-based architecture and extensive plugin ecosystem have introduced security challenges, particularly in input validation and access control. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests a need for rigorous patch management and security hardening. Its open-source nature allows for community-driven security improvements, though organizations should remain vigilant about emerging threats.

CVE ID Title CVSS Severity Published
CVE-2025-65036 XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro — xwiki-pro-macros CWE-862 8.3 High 2025-12-05
CVE-2025-65089 XWiki view file macro: User can view content of office file without view rights on the attachment — xwiki-pro-macros CWE-862 6.8 Medium 2025-11-19
CVE-2025-54990 XWiki AdminTools application doesn't set permissions on the AdminTools space — application-admintools CWE-276 5.3 Medium 2025-11-18
CVE-2025-55730 XWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro — xwiki-pro-macros CWE-116 10.0 Critical 2025-09-09
CVE-2025-55729 XWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macro — xwiki-pro-macros CWE-116 10.0 Critical 2025-09-09
CVE-2025-55728 XWiki Remote Macros vulnerable to remote code execution using the panel macro — xwiki-pro-macros CWE-95 10.0 Critical 2025-09-09
CVE-2025-55727 XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro — xwiki-pro-macros CWE-95 10.0 Critical 2025-09-09
CVE-2025-48885 application-urlshortener users can create arbitrary pages as long as they have view access to them — application-urlshortener CWE-352 4.3AI Medium AI 2025-05-30
CVE-2025-27604 XWiki Confluence Migrator Pro's homepage is public — application-confluence-migrator-pro CWE-200 7.5 High 2025-03-07
CVE-2025-27603 XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations — application-confluence-migrator-pro CWE-95 9.1 Critical 2025-03-07
CVE-2024-52298 macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author — macro-pdfviewer CWE-615 7.5 High 2024-11-13
CVE-2024-52299 The PDF viewer macro allows accessing any attachment without access right checks — macro-pdfviewer CWE-340 7.5 High 2024-11-13
CVE-2024-52300 macro-pdfviewer has a XSS through the width parameter — macro-pdfviewer CWE-80 9.1 Critical 2024-11-13
CVE-2024-42489 Pro Macros Remote Code Execution via Viewpdf and similar macros — xwiki-pro-macros CWE-74 10.0 Critical 2024-08-12
CVE-2024-30263 The PDF Viewer macro can be used to view PDF attachments with restricted access — macro-pdfviewer CWE-200 7.7 High 2024-04-04
CVE-2024-26138 License information is public, exposing instance id and license holder details — application-licensing CWE-862 5.3 Medium 2024-02-21
CVE-2023-46743 The same file cannot be opened with different rights — application-collabora CWE-276 7.4 High 2023-11-09
CVE-2023-45144 Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App — identity-oauth CWE-79 10.0 Critical 2023-10-16

This page lists every published CVE security advisory associated with xwikisas. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.