Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Medium CVE-2020-15171: Xwiki Xwiki


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: cxsecurity.com

In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. The only workaround is to give SCRIPT right only to trusted users. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2024-21648 | XWiki xwiki-platform/xwiki-platform-oldcore Rollback Action insufficient privileges


📈 49.53 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2021-21380: Xwiki Xwiki


📈 38.94 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-35150: Arbitrary Code Injection in XWiki.org XWiki


📈 33.39 Punkte
🕵️ Hacking

🕵️ CVE-2023-50732 | XWiki xwiki-platform-index-tree-macro authorization


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-21650 | XWiki xwiki-platform up to 14.10.16/15.5.2/15.7 User Registration first name/last name neutralization of directives


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-21651 | XWiki xwiki-platform-distribution-war Attachment denial of service (GHSA-8959-rfxh-r4j4)


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31984 | XWiki xwiki-platform-search-solr-ui Space Title neutralization of directives


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31983 | XWiki xwiki-platform-localization-source-wiki Multilingual Wiki authorization


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31982 | XWiki xwiki-platform-search-ui DatabaseSearch neutralization of directives


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31981 | XWiki xwiki-platform-oldcore PDFClass authorization


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31465 | XWiki xwiki-platform-search-ui SearchSuggestSourceSheet neutralization of directives


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31464 | XWiki xwiki-platform-oldcore information disclosure


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31996 | XWiki xwiki-commons-velocity Escapetool neutralization of directives


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31988 | XWiki xwiki-platform-realtime-ui HTML Converter API cross-site request forgery


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31987 | XWiki xwiki-platform-oldcore Custom Skins Support authorization


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31986 | XWiki xwiki-platform-scheduler-ui Scheduler Job cross-site request forgery


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31985 | XWiki xwiki-platform-scheduler-ui Job Scheduler cross-site request forgery


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-31997 | XWiki xwiki-platform-uiextension-api UIExtension authorization


📈 33.39 Punkte
🕵️ Sicherheitslücken

🕵️ XWiki CryptPad bis 1.1.0 Cross Site Scripting [CVE-2017-1000051]


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ XWiki 1.1 Rc1 information disclosure [CVE-2007-4898]


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ XWiki CryptPad up to 1.1.0 cross site scripting [CVE-2017-1000051]


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ XWiki up to 12.6.2/12.7 cross site scripting [CVE-2021-29459]


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31166 | XWiki Platform Old Core XWikiRights Resolution privileges management (GHSA-g4h6-qp44-wqvx)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-31167 | XWiki Platform up to 12.10.10/13.4.5/13.10.0 Security Parent POM improper authorization (GHSA-gg53-wf5x-r3r6)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36100 | XWiki Platform Applications Tag prior 13.10.6/14.4 code injection (GHSA-2g5c-228j-p52x)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36093 | XWiki Platform Web Templates prior 13.10.5/14.3RC1 Email Verification authentication bypass (GHSA-h5j3-5x63-p8jv)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36096 | XWiki Platform Index UI up to 13.10.5/14.2 Attachment cross site scripting (GHSA-gjmq-x5x7-wc36)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-36098 | XWiki Platform Mentions UI prior 13.10.6/14.4 Script cross site scripting (GHSA-c5v8-2q4r-5w9v)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39387 | XWiki up to 1.29.0 Request Parameter improper authentication (GHSA-m7gv-v8xx-v47w)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41932 | XWiki Platform Old Core Login Form resource consumption (GHSA-4x5r-6v26-7j4v)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41936 | XWiki Platform up to 13.10.7/14.4.2/14.5 REST Endpoint unknown vulnerability (GHSA-p88w-fhxw-xvcc)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41937 | XWiki Platform prior 13.10.8/14.6/14.6RC1 XAR Package authorization (GHSA-q6jp-gcww-8v2j)


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41931 | XWiki Platform Icon UI neutralization


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41933 | XWiki Platform cleartext storage


📈 17.25 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-41934 | XWiki Platform Menu UI neutralization


📈 17.25 Punkte
🕵️ Sicherheitslücken

matomo
•