maven package report

Is org.xwiki.platform:xwiki-platform safe?

2 known vulnerabilities, worst severity HIGH.

cvss

8.0

how bad it is if exploited, out of 10

epss

0.50%

chance of exploitation in the next 30 days

xyz score

3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-xh35-w7wg-95v3, the advisory selected below

// advisories

GHSA-xh35-w7wg-95v3

HIGHCVE-2024-21648

The rollback action is missing a right protection: it means that a user can rollback to a previous version of the page to gain rights they don't have anymore.

Affected: >= 15.6-rc-1, < 15.8-rc-1, >= 15.0-rc-1, < 15.5.3
Fixed in: 15.8-rc-1
Weakness: CWE-274
Published: 2024-01-08
Source: github

GHSA NVD MITRE reference reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 02:59 UTC. The most recent advisory here was published 2024-01-08. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.xwiki.platform:xwiki-platform safe? maven package security report | CyberXYZ