Maven (Java)

org.xwiki.platform:xwiki-platform-web Security Analysis

org.xwiki.platform:xwiki-platform-web has 5 known security vulnerabilities in Maven (Java). Upgrade to version 14.10.12 or later to resolve all known issues. Data sourced from OSV, enriched with EPSS exploit probability and CISA KEV.

5 Vulnerabilities

Low Immediate Risk

No actively exploited vulnerabilities detected. Monitor and update in your next maintenance window.

Recommended safe version: 14.10.12

Upgrading to 14.10.12 or later resolves all 5 known vulnerabilities in org.xwiki.platform:xwiki-platform-web. Update your pom.xml or build.gradle to version 14.10.12.

Is org.xwiki.platform:xwiki-platform-web in your project?

Check if you're affected and upgrade to 14.10.12 to stay secure.

Start Free Scan Get Alerted When New CVEs Drop

Total

Critical

High

Medium

Low

Vulnerabilities

5 unique vulnerabilities — sorted by exploitation risk (KEV → EPSS → CVSS). Click a CVE/GHSA ID for full details.

CVE / GHSA	Severity	CVSS	EPSS	Summary	Affected	Fixed In
CVE-2023-45137 XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages	CRITICAL	9.0	—	XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages	All versions	13.4-rc-1
CVE-2023-45135 XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title	CRITICAL	9.0	—	XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title	All versions	14.10.12
CVE-2023-45134 XWiki Platform XSS vulnerability from account in the create page form via template provider	CRITICAL	9.0	—	XWiki Platform XSS vulnerability from account in the create page form via template provider	All versions	13.4-rc-1
CVE-2023-34464 XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template	CRITICAL	9.0	—	XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template	All versions	14.4.8
CVE-2023-29207 Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro	HIGH	8.9	—	Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro	All versions	13.10.10, 14.4.6, 14.9

About This Data

Vulnerability data for org.xwiki.platform:xwiki-platform-web is sourced from the Open Source Vulnerability (OSV) database, aggregating reports from GitHub Advisory Database, NIST NVD, and ecosystem-specific sources.

CVSS (Common Vulnerability Scoring System) scores reflect exploitability and impact. EPSS (Exploit Prediction Scoring System) scores indicate the probability of exploitation within the next 30 days. Vulnerabilities marked with are listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.