Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 47
Reset filtersXWiki Platform's async and display macro allow displaying and interacting with any document in restricted mode
XWiki Platform vulnerable to code injection in display method used in user profiles
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
org.xwiki.platform:xwiki-platform-oldcore vulnerable to data leak through deleted documents
XWiki Platform subject to Uncontrolled Resource Consumption
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
Creation of new database tables through login form on PostgreSQL
Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
XWiki Platform Improper Authorization check for inactive users
XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action
Path Traversal in XWiki Platform
XWiki Remote Code Execution
Cross-site Scripting by SVG upload in xwiki-platform
Missing authorization in xwiki-platform
URL Redirection to Untrusted Site ('Open Redirect')
Missing authorization in xwiki-platform
Partial authorization bypass on document save in xwiki-platform
XSS Cross Site Scripting
RCE in XWiki
Users with SCRIPT right can execute arbitrary code in XWiki
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.