Vulnerabilities

TI-2023-18312 CVE-2023-36471 · GHSA-6pqf-c99p-758v

HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

HIGH 74

Xwiki commons is the common modules used by other XWiki top level projects.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.01029 Published 2023-06-29 Fixed in 14.10.6, 15.2-rc-1 CWE-74

TI-2023-13896 CVE-2023-29528 · GHSA-x37v-36wv-6v6h

MEDIUM 44

XWiki Commons are technical libraries common to several other top level XWiki projects.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.01277 Published 2023-04-20 Fixed in 14.10 CWE-79

TI-2023-11288 CVE-2023-26055 · GHSA-8cw6-4r32-6r3h

MEDIUM 45

XWiki Commons are technical libraries common to several other top level XWiki projects.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.01163 Published 2023-03-02 Fixed in 13.10.9, 14.4.4 +1 CWE-150

TI-2022-08708 CVE-2022-24898 · GHSA-m2r5-4w96-qxg5

MEDIUM 56

org.xwiki.commons:xwiki-commons-xml is a common module used by other XWiki top level projects.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01485 Published 2022-04-28 Fixed in 12.10.10, 13.4.4 +1 CWE-611