Xwiki

Pro Macros

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.3

CVE-2025-65036

  • EPSS 0.16%
  • Veröffentlicht 05.12.2025 16:10:08
  • Zuletzt bearbeitet 08.12.2025 18:26:49

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution....

6.8

CVE-2025-65089

  • EPSS 0.01%
  • Veröffentlicht 19.11.2025 17:41:31
  • Zuletzt bearbeitet 19.11.2025 19:15:50

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view rights on a page may see the content of an office attachment displayed with the view file macro. ...

10

CVE-2025-55730

  • EPSS 0.42%
  • Veröffentlicht 09.09.2025 18:53:53
  • Zuletzt bearbeitet 11.09.2025 17:14:25

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execu...

10

CVE-2025-55729

  • EPSS 0.42%
  • Veröffentlicht 09.09.2025 18:51:47
  • Zuletzt bearbeitet 11.09.2025 17:14:25

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in the ConfluenceLayoutSection macro allows remote code e...

9.8

CVE-2025-55728

  • EPSS 10.14%
  • Veröffentlicht 09.09.2025 18:40:51
  • Zuletzt bearbeitet 17.09.2025 19:45:32

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes parameter in the panel macro allows remote code execution...

9.8

CVE-2025-55727

Exploit
  • EPSS 9.58%
  • Veröffentlicht 09.09.2025 18:31:08
  • Zuletzt bearbeitet 17.09.2025 19:46:54

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution ...

8.8

CVE-2024-42489

  • EPSS 38.86%
  • Veröffentlicht 12.08.2024 16:15:16
  • Zuletzt bearbeitet 16.09.2024 19:46:18

Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit or comment right on any page to perform remote code execution. Other macros like Viewppt ar...