CyberSecBulletin

Org.xwiki.platform vulnerabilities

We track 1 vulnerability in Org.xwiki.platform products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 8, 2026.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest Org.xwiki.platform vulnerabilities

  • 8.6 High severity

    xwiki-platform: Missing Authorization

    CVE-2026-33229XWiki

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly protected scripting API allows any user with script right to bypass the sandboxing of the Velocity scripting API