Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.xwiki.platform:xwiki-platform-legacy-oldcore
Maven
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
CVE-2023-26474 · GHSA-3738-P9X3-MV9R
org.xwiki.platform:xwiki-platform-legacy-oldcore
org.xwiki.platform:xwiki-platform-oldcore
Maven
Critical
Fix reported
2026-09-10
XWiki's REST APIs can list all pages/spaces, leading to unavailability
CVE-2026-40104 · GHSA-MRQG-XMGM-RC5G
org.xwiki.platform:xwiki-platform-legacy-oldcore
org.xwiki.platform:xwiki-platform-oldcore
Maven
Medium
Fix reported
2026-05-05
XWiki vulnerable to remote code execution with script right through unprotected Velocity scripting API
CVE-2026-33229 · GHSA-H259-74H5-4RH9
org.xwiki.platform:xwiki-platform-legacy-oldcore
org.xwiki.platform:xwiki-platform-oldcore
Maven
High
Fix reported
2026-04-08
XWiki exposes passwords and emails stored in fields not named password/email in xml.vm
CVE-2025-54125 · GHSA-57Q2-6CP4-9MQ3
org.xwiki.platform:xwiki-platform-legacy-oldcore
org.xwiki.platform:xwiki-platform-oldcore
Maven
High
Fix reported
2025-08-06
XWiki leaks password hashes and other accessible password properties
CVE-2025-54124 · GHSA-R38M-CGPG-QJ69
org.xwiki.platform:xwiki-platform-legacy-oldcore
org.xwiki.platform:xwiki-platform-oldcore
Maven
High
Fix reported
2025-08-06
