Security Advisories

critical2023-10-25

CVE-2023-45137-XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages

xwiki/xwiki-platform · GHSA-93gh-jgjj-r929

critical2023-10-25

CVE-2023-45136-XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled

View chart

xwiki/xwiki-platform · GHSA-qcj9-gcpg-4w2w

critical2023-10-25

CVE-2023-45135-XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title

View chart

xwiki/xwiki-platform · GHSA-ghf6-2f42-mjh9

critical2023-10-25

CVE-2023-45134-XWiki Platform XSS vulnerability from account in the create page form via template provider

View chart

xwiki/xwiki-platform · GHSA-gr82-8fj2-ggc3

critical2023-10-25

CVE-2023-37913-org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter

View chart

xwiki/xwiki-platform · GHSA-vcvr-v426-3m3m

high2023-10-25

CVE-2023-37912-XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

View chart

xwiki/xwiki-rendering · GHSA-35j5-m29r-xfq5

medium2023-10-25

CVE-2023-37911-org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents

View chart

xwiki/xwiki-platform · GHSA-gh64-qxh5-4m33

high2023-10-25

CVE-2023-37910-org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move

View chart

xwiki/xwiki-platform · GHSA-rwwx-6572-mp29

high2023-10-25

CVE-2023-37909-Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet

View chart

xwiki/xwiki-platform · GHSA-v2rr-xw95-wcjx

critical2023-10-25

CVE-2023-37908-org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

View chart

xwiki/xwiki-rendering · GHSA-663w-2xp3-5739

medium2023-10-25

CVE-2023-5752-Command Injection in pip when used with Mercurial

View chart

pypa/pip · GHSA-mq26-g339-26xf

medium2023-10-25

CVE-2023-46652-Jenkins lambdatest-automation Plugin missing permission check

View chart

jenkinsci/lambdatest-automation-plugin · GHSA-vw64-g7c6-mm7g

high2023-10-25

CVE-2023-46650-Stored XSS vulnerability in Jenkins GitHub Plugin

View chart

jenkinsci/github-plugin · GHSA-mv77-fj63-q5w8

high2023-10-25

CVE-2023-46654-Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion

View chart

jenkinsci/electricflow-plugin · GHSA-jx7x-rf3f-j644

high2023-10-25

CVE-2023-46659-Jenkins Edgewall Trac Plugin vulnerable to Stored XSS

View chart

jenkinsci/trac-plugin · GHSA-jwx3-2hq3-682c

medium2023-10-25

CVE-2023-46655-Jenkins CloudBees CD Plugin vulnerable to arbitrary file read

View chart

jenkinsci/electricflow-plugin · GHSA-9ggw-h9mf-4jh7

low2023-10-25

CVE-2023-46657-Jenkins Gogs Plugin uses non-constant time webhook token comparison

View chart

jenkinsci/gogs-webhook-plugin · GHSA-885r-hhpr-cc9p

low2023-10-25

CVE-2023-46656-Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison

View chart

jenkinsci/multibranch-scan-webhook-trigger-plugin · GHSA-8859-v9jp-cphf

low2023-10-25

CVE-2023-46660-Non-constant time webhook token hash comparison in Jenkins Zanata Plugin

View chart

jenkinsci/zanata-plugin · GHSA-86j9-25m2-9w97

medium2023-10-25

CVE-2023-46651-Jenkins Warnings Plugin exposures system-scoped credentials

View chart

jenkinsci/warnings-ng-plugin · GHSA-66hv-fhcm-7xm7