Approved changes feed: RSS · Atom

cpe:2.3:a:xwiki:xwiki:14.6:*:*:*:*:*:*:*

part: a version: 14.6 update: *

VendorXwiki (cdc9c0cd-6ac5-5dc0-9f52-915ebd57f20d)
ProductXwiki (2fad5bf8-5703-5dac-bd8d-95a867c2e84d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/xwiki/xwiki purl2cpe 2026-06-01 10:18:15.715561
pkg:github/xwiki/xwiki-platform purl2cpe 2026-06-01 10:18:15.715563
pkg:gitlab/q-phillips/xwiki-platform purl2cpe 2026-06-01 10:18:15.715564
pkg:xwiki/xwiki purl2cpe 2026-06-01 10:18:15.715565

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29506 vulnerable 2026-06-03 14:51:41.185654 org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticated endpoints
MEDIUM (5.4)
XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some code using the URL of authenticated endpoints. This problem has been patched on XWiki 13.10.11, 14.4.7 and 14.10.
Published: 2023-04-16T06:49:51.376Z
Updated: 2025-02-06T17:02:00.453Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.