Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filtersXWiki's REST APIs don't enforce any limits, leading to unavailability and OOM in large wikis
XWiki Platform is vulnerable to HQL injection via wiki and space search REST API
XWiki makes title of inaccessible pages available through the class property values REST API
XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API
org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API
XWiki allows unregistered users to access private pages information through REST endpoint
XWiki Platform document history including authors of any page exposed to unauthorized actors
XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API
XWiki Platform may show email addresses in clear in REST results
Exposure of Private Personal Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-rest-server
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.