Known vulnerabilities in XWiki platform 1.3-rc-1 - page 2

Vendor: XWiki
Version: 1.3-rc-1
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 44
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting XWiki platform version 1.3-rc-1 XWiki platform 1.3-rc-1 is affected by 44 vulnerabilities: 7 high, 28 medium, 9 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129926 - Cross-Site Request Forgery (CSRF)
CVE-2023-46242
CWE-352 High
No
No
14.10.7, 15.2 07.11.2023 SB2022112156
#VU129942 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-40176
CWE-80 Medium
No
No
14.10.5, 15.1 rc-1 21.08.2023 SB2022112156
#VU129934 - Eval Injection
CVE-2023-40177
CWE-95 Medium
No
No
14.10.5, 15.1 rc-1 21.08.2023 SB2022112156
#VU129927 - Cross-Site Request Forgery (CSRF)
CVE-2023-37277
CWE-352 High
No
No
14.10.8, 15.2 10.07.2023 SB2022112156
#VU129945 - Incorrect Authorization
CVE-2023-35166
CWE-863 Medium
No
No
14.10.5, 15.1 rc-1 20.06.2023 SB2022112156
#VU129938 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-34464
CWE-79 Low
No
No
14.4.8, 14.10.5, 15.1 rc-1 20.06.2023 SB2022112156
#VU129946 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-32068
CWE-601 Medium
No
No
14.10.4, 15.0 15.05.2023 SB2022112156
#VU129972 - Eval Injection
CVE-2023-29512
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 18.04.2023 SB2022112156
#VU129993 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-29205
CWE-80 Medium
No
No
14.8 rc-1 12.04.2023 SB2022112156
#VU129989 - Exposure of resource to wrong sphere
CVE-2023-29208
CWE-668 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129981 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27480
CWE-611 Low
No
No
13.10.11, 14.4.7, 14.10 07.03.2023 SB2022112156
#VU130002 - Resource exhaustion
CVE-2022-41932
CWE-400 Medium
No
No
13.10.8, 14.4.2, 14.6 21.11.2022 SB2022112156
#VU129999 - Eval Injection
CVE-2022-41934
CWE-95 Medium
No
No
13.10.8, 14.4.3, 14.6 21.11.2022 SB2022112156
#VU130000 - Missing Authorization
CVE-2022-41937
CWE-862 Medium
No
No
13.10.8, 14.4.3, 14.6 21.11.2022 SB2022112156
#VU130015 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-36094
CWE-80 Medium
No
No
13.10.6, 14.3 rc-1 08.09.2022 SB2022090868
#VU130029 - Missing Authorization
CVE-2022-23621
CWE-862 Low
No
No
12.10.9, 13.4.3, 13.7 09.02.2022 SB2022020951
#VU130030 - Relative Path Traversal
CVE-2022-23620
CWE-23 Low
No
No
13.6 09.02.2022 SB2022020951
#VU130031 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23619
CWE-200 Medium
No
No
12.10.9, 13.4.1, 13.6 09.02.2022 SB2022020951
#VU130032 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-23618
CWE-601 Medium
No
No
12.10.7, 13.3 09.02.2022 SB2021070132
#VU130034 - Missing Authorization
CVE-2022-23617
CWE-862 Low
No
No
12.10.6, 13.2 09.02.2022 SB2021070132


Showing elements 21 - 40 out of 44