xwiki application licensing vulnerabilities

Latest xwiki application licensing CVEs

Newest publication first

1. CVE-2024-26138 License information is public, exposing instance id and license holder details

   Published 2024-02-21

   Medium·CVSS 5.3 EPSS 0.49%

   The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document Licenses.Code.LicenseJSON that provides information for admins regarding active licenses. This document is public and thus exposes this information publicly....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.