org.xwiki.platform:xwiki-platform-rest-server (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.xwiki.platform:xwiki-platform-rest-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (11)

• CVE-2025-32969 — CVSS 9.8 (critical): XWiki is a generic wiki platform. In versions starting from 1.8 and prior to 15.10.16, 16.4.6, and 16.10.1, it is possible for a remote…
• CVE-2023-37277 — CVSS 9.6 (critical): XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API allows executing all…
• CVE-2026-33137: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki…
• CVE-2025-52472: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version…
• CVE-2025-49584 — CVSS 7.5 (high): XWiki is a generic wiki platform. In XWiki Platform versions 10.9 through 16.4.6, 16.5.0-rc-1 through 16.10.2, and 17.0.0-rc-1, the title…
• CVE-2023-35151 — CVSS 7.5 (high): XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can…
• CVE-2025-66473 — CVSS 7.5 (high): XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0…
• CVE-2025-29925 — CVSS 5.3 (medium): XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST…
• CVE-2022-41936 — CVSS 5.3 (medium): XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The `modifications` rest endpoint…
• CVE-2024-45591 — CVSS 5.3 (medium): XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The…
• CVE-2025-46554 — CVSS 5.3 (medium): XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1…