Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-29527Criticalorg.xwiki.platform:xwiki-platform-appwithinminutes-ui: XWiki Platform vulnerable to code injection from account through AWM view sheet CVE-2023-29526Criticalorg.xwiki.platform:xwiki-platform-oldcore: XWiki Platform's async and display macro allow displaying and interacting with any document in restricted mode CVE-2023-29524Criticalorg.xwiki.platform:xwiki-platform-scheduler-ui: XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet CVE-2023-29523Criticalorg.xwiki.platform:xwiki-platform-oldcore: XWiki Platform vulnerable to code injection in display method used in user profiles CVE-2023-29522Highorg.xwiki.platform:xwiki-platform-xclass-ui: XWiki Platform vulnerable to code injection from view right on XWiki.ClassSheet CVE-2023-29521Highorg.xwiki.platform:xwiki-platform-vfs-ui: XWiki Platform vulnerable to code injection from account/view through VFS Tree macro CVE-2023-29520Mediumorg.xwiki.platform:xwiki-platform-localization-source-wiki: XWiki Platform vulnerable to page render failure due to broken translations CVE-2023-29519Highorg.xwiki.platform:xwiki-platform-attachment-ui: org.xwiki.platform:xwiki-platform-attachment-ui vulnerable to Code Injection CVE-2023-29518Highorg.xwiki.platform:xwiki-platform-invitation-ui: XWiki Platform vulnerable to privilege escalation from view right using Invitation.InvitationCommon CVE-2023-29517Highorg.xwiki.platform:xwiki-platform-office-viewer: Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer CVE-2023-29516Criticalorg.xwiki.platform:xwiki-platform-attachment-ui: XWiki Platform vulnerable to privilege escalation from view right on XWiki.AttachmentSelector CVE-2023-29515Mediumorg.xwiki.platform:xwiki-platform-appwithinminutes: XWiki App Within Minutes app grants space admin rights that allows cross-site scripting CVE-2023-29514Criticalorg.xwiki.platform.applications:xwiki-application-administration: XWiki vulnerable to Code Injection in template provider administration CVE-2023-29513Mediumorg.xwiki.platform:xwiki-platform-web-templates: xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro CVE-2023-29512Criticalorg.xwiki.platform:xwiki-platform-web-templates: xwiki-platform-web-templates vulnerable to Eval Injection CVE-2023-20873Criticalorg.springframework.boot:spring-boot-actuator-autoconfigure: Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry CVE-2023-29528Criticalorg.xwiki.commons:xwiki-commons-xml: Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml CVE-2023-25601Mediumorg.apache.dolphinscheduler:dolphinscheduler-api: Apache DolphinScheduler's python gateway suffered from improper authentication CVE-2023-29926Criticaltech.powerjob:powerjob: PowerJob vulnerable to remote code execution CVE-2023-20862Mediumorg.springframework.security:spring-security-core: Spring Security logout not clearing security context CVE-2023-29922Mediumtech.powerjob:powerjob: PowerJob vulnerable to Incorrect Access Control via the create user/save interface.CVE-2023-29510Criticalorg.xwiki.platform:xwiki-platform-administration-ui: Code injection via unescaped translations in xwiki-platform CVE-2023-26048Mediumorg.eclipse.jetty:jetty-server: OutOfMemoryError for large multipart without filename in Eclipse Jetty CVE-2023-29923Mediumtech.powerjob:powerjob: PowerJob vulnerable to Insecure Permissions CVE-2023-29921Mediumtech.powerjob:powerjob: PowerJob Incorrect Access Control vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo