Vendor/product archive

xwiki / pdf_viewer_macro CVEs

Beta · best-effort

3 CVEs tagged to xwiki / pdf_viewer_macro — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to xwiki vendor archive

CVE-2024-52300

Published Nov 13, 2024

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any user who can edit a…

CVSS 9.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-52299

Published Nov 13, 2024

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment stored in the wiki as the "key"…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2024-52298

Published Nov 13, 2024

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Delegate my view right" feature as…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1