Vulnerabilities

TI-2024-34973 CVE-2024-52298

macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author

HIGH 72

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00669 Published 2024-11-13 Fixed in 2.5.6 CWE-615

TI-2024-34974 CVE-2024-52299

HIGH 72

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00523 Published 2024-11-13 Fixed in 2.5.6 CWE-340

TI-2024-34975 CVE-2024-52300

HIGH 74

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.0046 Published 2024-11-13 Fixed in 2.5.6 CWE-80